vscode-markdown-preview-enhanced vulnerabilities | LiveThreat CVE Feed

Product

vscode-markdown-preview-enhanced

by shd101wyy · last CVE Oct 14, 2026

CVEs

On KEV

8.8

Max CVSS

New 30D

Severity mix

Critical 0High 3Medium 2Low 0

Severity

Exploitation

Watch

Add vscode-markdown-preview-enhanced to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-54525	8.8	0%	Oct 14	Markdown Preview Enhanced: One Click RCE via Markdown Link Command Injection on Windows Affected: < 0.8.28
CVE-2026-54566	8.5	0%	Oct 14	Markdown Preview Enhanced: Remote Code Execution via VM Sandbox Escape in `.crossnote/config.js` and `.crossnote/parser.js` Affected: < 0.8.29
CVE-2026-54702	7.3	0%	Oct 14	Markdown Preview Enhanced: Blind Command Dispatch via Unvalidated Webview Message Handler Affected: < 0.8.30