Log in Start free

Typora

Products

ProductCVEsExploitedLatest
Typora5–Dec 12, 2025

Exploited and recent CVEs

  • CVE-2024-14010 Critical 9.8 Typora 1.7.4 OS Command Injection via Export PDF Preferences 1.2%
  • CVE-2023-2971 Medium 6.3 Typora Local File Disclosure 0.5%
  • CVE-2023-2317 High 8.6 Typora DOM-Based Cross-site Scripting leading to Remote Code Execution 2.4%
  • CVE-2023-2316 High 7.4 Typora Local File Disclosure 0.7%
  • CVE-2022-43668 Medium 6.1 Typora versions prior to 1.4.4 fails to properly neutralize JavaScript code, which may result in executing JavaScript code contained in the file when opening a file with the affected product. 0.4%