This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2026-96442 →

DEBIAN-CVE-2026-96442

A code execution flaw was found in Emacs, affecting versions prior to 31.2. The Flymake mode using language backends other than Lisp would execute arb...

Original description

The description as published by the source.

A code execution flaw was found in Emacs, affecting versions prior to 31.2. The Flymake mode using language backends other than Lisp would execute arbitrary code from the edited file while performing syntax checking. Viewing or editing untrusted files using Emacs could lead to arbitrary code execution with the privileges of the user running Emacs.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 emacs

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:13 emacs

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:14 emacs

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

References

advisory security-tracker.debian.org