Log in Start free

shd101wyy

Products

ProductCVEsExploitedLatest
vscode-markdown-preview-enhanced5–Oct 14, 2026
Markdown Preview Enhanced4–Jun 5, 2026
crossnote1–Jun 5, 2026

Exploited and recent CVEs

  • CVE-2026-54702 High 7.3 Markdown Preview Enhanced: Blind Command Dispatch via Unvalidated Webview Message Handler 0.3%
  • CVE-2026-54701 Medium 6.9 Markdown Preview Enhanced: Stored XSS via Unsanitized `.crossnote/head.html` Injection in Webview 0.3%
  • CVE-2026-54703 Medium 5.8 Markdown Preview Enhanced: Arbitrary File Write via updateMarkdown Command Without Path Validation 0.3%
  • CVE-2026-54566 High 8.5 Markdown Preview Enhanced: Remote Code Execution via VM Sandbox Escape in `.crossnote/config.js` and `.crossnote/parser.js` 0.3%
  • CVE-2026-54525 High 8.8 Markdown Preview Enhanced: One Click RCE via Markdown Link Command Injection on Windows 0.4%
  • CVE-2026-11422 High 7.1 Markdown Preview Enhanced 0.8.x Code Injection via WaveDrom Rendering 0.2%
  • CVE-2026-11422 High 7.1 Markdown Preview Enhanced 0.8.x Code Injection via WaveDrom Rendering 0.2%
  • CVE-2026-50733 High 8.8 Markdown Preview Enhanced Arbitrary Code Execution via WaveDrom eval() 0.7%
  • CVE-2026-49493 High 8.8 Markdown Preview Enhanced Arbitrary Code Execution via Bitfield interpretJS() 0.3%
  • CVE-2026-49492 High 8.8 Markdown Preview Enhanced OS Command Injection in External File and Link Opening 0.3%