Login Request a demo
SH
Vendor
shd101wyy
3 products with CVEs on record
11
CVEs
0
On KEV
5
New 30D
Products
VS
vscode-markdown-preview-enhanced
shd101wyy
8.8
5 CVEs0 on KEV5 new
MP
Markdown Preview Enhanced
shd101wyy
8.8
5 CVEs0 on KEV0 new
CR
crossnote
shd101wyy
7.1
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-54702
VS
vscode-markdown-preview-enhanced
shd101wyy
7.3
0%
Oct 14Markdown Preview Enhanced: Blind Command Dispatch via Unvalidated Webview Message Handler
CVE-2026-54701
VS
vscode-markdown-preview-enhanced
shd101wyy
6.9
0%
Oct 14Markdown Preview Enhanced: Stored XSS via Unsanitized `.crossnote/head.html` Injection in Webview
CVE-2026-54703
VS
vscode-markdown-preview-enhanced
shd101wyy
5.8
0%
Oct 14Markdown Preview Enhanced: Arbitrary File Write via updateMarkdown Command Without Path Validation
CVE-2026-54566
VS
vscode-markdown-preview-enhanced
shd101wyy
8.5
0%
Oct 14Markdown Preview Enhanced: Remote Code Execution via VM Sandbox Escape in `.crossnote/config.js` and `.crossnote/parser.js`
CVE-2026-54525
VS
vscode-markdown-preview-enhanced
shd101wyy
8.8
0%
Oct 14Markdown Preview Enhanced: One Click RCE via Markdown Link Command Injection on Windows
CVE-2026-11422
CR
crossnote
shd101wyy
7.1
0%
Jun 5Markdown Preview Enhanced 0.8.x Code Injection via WaveDrom Rendering
CVE-2026-50733
MP
Markdown Preview Enhanced
shd101wyy
8.8
1%
Jun 5Markdown Preview Enhanced Arbitrary Code Execution via WaveDrom eval()
CVE-2026-49493
MP
Markdown Preview Enhanced
shd101wyy
8.8
0%
Jun 5Markdown Preview Enhanced Arbitrary Code Execution via Bitfield interpretJS()
CVE-2026-49492
MP
Markdown Preview Enhanced
shd101wyy
8.8
0%
Jun 5Markdown Preview Enhanced OS Command Injection in External File and Link Opening
CVE-2025-65716
MP
Markdown Preview Enhanced
Shd101wyy
8.8
1%
Feb 16An issue in Visual Studio Code Extensions Markdown Preview Enhanced v0.8.18 allows attackers to execute arbitrary code via uploading a crafted .Md file