S
Vendor security profile
shd101wyy
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs5
Critical0
CISA KEV0
Public exploit1
Patch rate%0
Avg. CVSS7.5
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
0
5
CVE KEV
CVE severity distribution
5toplam CVE
High3 (60%)
Medium2 (40%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%20
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
5Unknown
Latest vulnerabilities
7.3
CVE-2026-54702
Markdown Preview Enhanced: Blind Command Dispatch via Unvalidated Webview Message Handler
S
Patch status unknown
6.9
CVE-2026-54701
Markdown Preview Enhanced: Stored XSS via Unsanitized `.crossnote/head.html` Injection in Webview
S
Patch status unknown
5.8
CVE-2026-54703
Markdown Preview Enhanced: Arbitrary File Write via updateMarkdown Command Without Path Validation
S
Patch status unknown
8.5
CVE-2026-54566
Markdown Preview Enhanced: Remote Code Execution via VM Sandbox Escape in `.crossnote/config.js` and `.crossnote/parser.js`
S
Patch status unknown
8.8
CVE-2026-54525
Markdown Preview Enhanced: One Click RCE via Markdown Link Command Injection on Windows
S
Patch status unknown