cvedb.io
CVE-2026-6861
MEDIUM · CVSS 6.1
EPSS exploitation probability: 0%
Published 2026-04-22T14:17:07.860 · Last modified 2026-06-17T11:01:26.687

Summary

A flaw was found in GNU Emacs. This vulnerability, a memory corruption issue, occurs when Emacs processes specially crafted SVG (Scalable Vector Graphics) CSS (Cascading Style Sheets) data. A local user could exploit this by convincing a victim to open a malicious SVG file, which may lead to a denial of service (DoS) or potentially information disclosure.

Affected products

gnu — emacs

Does this affect you?

Add your gear to cvedb and we'll alert you only when gnu ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.