CVE Intelligence

Typora Typora vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Typora Typora: 1 record(s), with affected versions and fixes.

CVE-2024-14010 Critical · 9.8 CWE-78 Dec 12, 2025
Typora 1.7.4 OS Command Injection via Export PDF Preferences
Typora 1.7.4 contains a command injection vulnerability in the PDF export preferences that allows attackers to execute arbitrary system commands. Attackers can inject malicious commands into the 'run command' input field during PDF export to achieve remote code execution.