{"id":"CVE-2026-96442","revision":"b8335273edb14f42ba1c8c131ee38787","records":[{"revision":"b8335273edb14f42ba1c8c131ee38787","observedAt":"2026-10-27T22:45:55.385+00:00","statement":{"source":"cve-program","id":"CVE-2026-96442","aliases":[],"title":"Emacs: emacs: arbitrary code execution in flymake mode","description":"A code execution flaw was found in Emacs, affecting versions prior to 31.2. The Flymake mode using language backends other than Lisp would execute arbitrary code from the edited file while performing syntax checking. Viewing or editing untrusted files using Emacs could lead to arbitrary code execution with the privileges of the user running Emacs.","state":0,"publishedAt":"2026-09-23T10:10:36.734+00:00","modifiedAt":"2026-10-27T21:52:56+00:00","affected":[{"ecosystem":"https://git.savannah.gnu.org/cgit/emacs.git/","name":"emacs","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"GNU Emacs\",\n                    \"product\": \"GNU Emacs\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"0\",\n                            \"lessThan\": \"31.2\",\n                            \"versionType\": \"semver\"\n                        }\n                    ],\n                    \"packageName\": \"emacs\",\n                    \"collectionURL\": \"https://git.savannah.gnu.org/cgit/emacs.git/\",\n                    \"defaultStatus\": \"unaffected\"\n                }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"emacs","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Red Hat\",\n                    \"product\": \"Red Hat Enterprise Linux 10\",\n                    \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n                    \"packageName\": \"emacs\",\n                    \"defaultStatus\": \"affected\",\n                    \"versions\": [\n                        {\n                            \"version\": \"1:29.4-14.el10_2.3\",\n                            \"lessThan\": \"*\",\n                            \"versionType\": \"rpm\",\n                            \"status\": \"unaffected\"\n                        }\n                    ],\n                    \"cpes\": [\n                        \"cpe:/o:redhat:enterprise_linux:10.2\"\n                    ]\n                }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"emacs","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Red Hat\",\n                    \"product\": \"Red Hat Enterprise Linux 8\",\n                    \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n                    \"packageName\": \"emacs\",\n                    \"defaultStatus\": \"affected\",\n                    \"versions\": [\n                        {\n                            \"version\": \"1:26.1-15.el8_10.4\",\n                            \"lessThan\": \"*\",\n                            \"versionType\": \"rpm\",\n                            \"status\": \"unaffected\"\n                        }\n                    ],\n                    \"cpes\": [\n                        \"cpe:/a:redhat:enterprise_linux:8::appstream\",\n                        \"cpe:/o:redhat:enterprise_linux:8::baseos\"\n                    ]\n                }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"emacs","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Red Hat\",\n                    \"product\": \"Red Hat Enterprise Linux 8\",\n                    \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n                    \"packageName\": \"emacs\",\n                    \"defaultStatus\": \"affected\",\n                    \"versions\": [\n                        {\n                            \"version\": \"1:26.1-15.el8_10.4\",\n                            \"lessThan\": \"*\",\n                            \"versionType\": \"rpm\",\n                            \"status\": \"unaffected\"\n                        }\n                    ],\n                    \"cpes\": [\n                        \"cpe:/a:redhat:enterprise_linux:8::appstream\",\n                        \"cpe:/o:redhat:enterprise_linux:8::baseos\"\n                    ]\n                }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"emacs","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Red Hat\",\n                    \"product\": \"Red Hat Enterprise Linux 9\",\n                    \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n                    \"packageName\": \"emacs\",\n                    \"defaultStatus\": \"affected\",\n                    \"versions\": [\n                        {\n                            \"version\": \"1:27.2-18.el9_8.3\",\n                            \"lessThan\": \"*\",\n                            \"versionType\": \"rpm\",\n                            \"status\": \"unaffected\"\n                        }\n                    ],\n                    \"cpes\": [\n                        \"cpe:/a:redhat:enterprise_linux:9::appstream\"\n                    ]\n                }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"emacs","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Red Hat\",\n                    \"product\": \"Red Hat Enterprise Linux 6\",\n                    \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n                    \"packageName\": \"emacs\",\n                    \"defaultStatus\": \"unknown\",\n                    \"cpes\": [\n                        \"cpe:/o:redhat:enterprise_linux:6\"\n                    ]\n                }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"emacs","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Red Hat\",\n                    \"product\": \"Red Hat Enterprise Linux 7\",\n                    \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n                    \"packageName\": \"emacs\",\n                    \"defaultStatus\": \"affected\",\n                    \"cpes\": [\n                        \"cpe:/o:redhat:enterprise_linux:7\"\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","score":7.8,"severity":"HIGH"}],"references":["https://access.redhat.com/errata/RHSA-2026:84591","https://access.redhat.com/errata/RHSA-2026:85245","https://access.redhat.com/errata/RHSA-2026:90800","https://access.redhat.com/security/cve/CVE-2026-96442","https://bugzilla.redhat.com/show_bug.cgi?id=2537347","https://github.com/emacs-mirror/emacs/commit/135e6f63f08fee3d374fa1a5187bce941a2d3e3c","https://github.com/emacs-mirror/emacs/commit/abc802ee2eb0b1663349ddf22a461f8e54a383fb","https://www.openwall.com/lists/oss-security/2026/09/14/1"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-96442","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-96442","identifiers":["CVE-2026-96442"]},"retained":false,"historicalAffected":[]}],"coverage":[]}