shd101wyy 厂商相关 9 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-54702 | Markdown Preview Enhanced: Blind Command Dispatch via Unvalidated Webview Message Handler — vscode-markdown-preview-enhanced CWE-749 | 7.3 | High | 2026-10-14 |
| CVE-2026-54701 | Markdown Preview Enhanced: Stored XSS via Unsanitized `.crossnote/head.html` Injection in Webview — vscode-markdown-preview-enhanced CWE-79 | 6.9 | Medium | 2026-10-14 |
| CVE-2026-54703 | Markdown Preview Enhanced: Arbitrary File Write via updateMarkdown Command Without Path Validation — vscode-markdown-preview-enhanced CWE-73 | 5.8 | Medium | 2026-10-14 |
| CVE-2026-54566 | Markdown Preview Enhanced: Remote Code Execution via VM Sandbox Escape in `.crossnote/config.js` and `.crossnote/parser.js` — vscode-markdown-preview-enhanced CWE-94 | 8.5 | High | 2026-10-14 |
| CVE-2026-54525 | Markdown Preview Enhanced: One Click RCE via Markdown Link Command Injection on Windows — vscode-markdown-preview-enhanced CWE-78 | 8.8 | High | 2026-10-14 |
本页汇总了 shd101wyy 厂商截至目前公开的全部 9 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。