GNU Emacs

• CVE-2026-108976 High 7.8 GNU Emacs before 31.2 (and TRAMP through 2.8.2) allows OS command injection via a filename because tramp-user-regexp has an incomplete list of disallowed inputs. NOTE: this issue exists because of an 0.6%
• CVE-2026-96269 High 7.5 GNU Emacs 28.1 through 31.1 allows arbitrary code execution upon opening a file, because an untrusted value of read-symbol-shorthands affects the intern and unintern functions. This affects the defaul 0.1%
• CVE-2026-77219 High 7.1 GNU Emacs < 31.0.91 Heap Over-Read via PBM/PPM/PGM Image Loader 0.1%
• CVE-2026-71394 Medium 5.3 Heap Use of Uninitialized Memory in GNU Emacs for Android 0.4%
• CVE-2026-71393 Medium 5.3 Heap Buffer Overflow in GNU Emacs for Android 0.7%
• CVE-2026-71392 Medium 5.3 Integer Overflow in GNU Emacs for Android 0.7%
• CVE-2026-71391 Medium 5.3 Off-by-One Error in GNU Emacs for Android 0.5%