Browse all 9 CVE security advisories affecting shd101wyy. AI-powered Chinese analysis, POCs, and references for each vulnerability.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-54702 | Markdown Preview Enhanced: Blind Command Dispatch via Unvalidated Webview Message Handler — vscode-markdown-preview-enhanced CWE-749 | 7.3 | High | 2026-10-14 |
| CVE-2026-54701 | Markdown Preview Enhanced: Stored XSS via Unsanitized `.crossnote/head.html` Injection in Webview — vscode-markdown-preview-enhanced CWE-79 | 6.9 | Medium | 2026-10-14 |
| CVE-2026-54703 | Markdown Preview Enhanced: Arbitrary File Write via updateMarkdown Command Without Path Validation — vscode-markdown-preview-enhanced CWE-73 | 5.8 | Medium | 2026-10-14 |
| CVE-2026-54566 | Markdown Preview Enhanced: Remote Code Execution via VM Sandbox Escape in `.crossnote/config.js` and `.crossnote/parser.js` — vscode-markdown-preview-enhanced CWE-94 | 8.5 | High | 2026-10-14 |
| CVE-2026-54525 | Markdown Preview Enhanced: One Click RCE via Markdown Link Command Injection on Windows — vscode-markdown-preview-enhanced CWE-78 | 8.8 | High | 2026-10-14 |
This page lists every published CVE security advisory associated with shd101wyy. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.