High severity7.8NVD Advisory· Published Sep 23, 2026· Updated Oct 27, 2026
CVE-2026-96442
CVE-2026-96442
Description
A code execution flaw was found in Emacs, affecting versions prior to 31.2. The Flymake mode using language backends other than Lisp would execute arbitrary code from the edited file while performing syntax checking. Viewing or editing untrusted files using Emacs could lead to arbitrary code execution with the privileges of the user running Emacs.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
10- osv-coords9 versionspkg:rpm/almalinux/emacspkg:rpm/almalinux/emacs-commonpkg:rpm/almalinux/emacs-filesystempkg:rpm/almalinux/emacs-lucidpkg:rpm/almalinux/emacs-noxpkg:rpm/almalinux/emacs-nwpkg:rpm/almalinux/emacs-terminalpkg:rpm/opensuse/emacs&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/emacs&distro=openSUSE%20Tumbleweed
< 1:29.4-14.el10_2.3+ 8 more
- (no CPE)range: < 1:29.4-14.el10_2.3
- (no CPE)range: < 1:29.4-14.el10_2.3
- (no CPE)range: < 1:29.4-14.el10_2.3
- (no CPE)range: < 1:29.4-14.el10_2.3
- (no CPE)range: < 1:27.2-18.el9_8.3
- (no CPE)range: < 1:29.4-14.el10_2.3
- (no CPE)range: < 1:26.1-15.el8_10.4
- (no CPE)range: < 30.2-160000.4.1
- (no CPE)range: < 31.1-4.1
Patches
Vulnerability mechanics
References
8- access.redhat.com/errata/RHSA-2026:84591nvd
- access.redhat.com/errata/RHSA-2026:85245nvd
- access.redhat.com/errata/RHSA-2026:90800nvd
- access.redhat.com/security/cve/CVE-2026-96442nvd
- bugzilla.redhat.com/show_bug.cginvd
- github.com/emacs-mirror/emacs/commit/135e6f63f08fee3d374fa1a5187bce941a2d3e3cnvd
- github.com/emacs-mirror/emacs/commit/abc802ee2eb0b1663349ddf22a461f8e54a383fbnvd
- www.openwall.com/lists/oss-security/2026/09/14/1nvd
News mentions
0No linked articles in our index yet.