CVE Intelligence

Typora vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Typora products: 1 record(s), with severity, exploitation and fixes.

Typora 1

Exploited only (KEV) →

CVE-2024-14010 Critical · 9.8 CWE-78 Dec 12, 2025
Typora 1.7.4 OS Command Injection via Export PDF Preferences
Typora 1.7.4 contains a command injection vulnerability in the PDF export preferences that allows attackers to execute arbitrary system commands. Attackers can inject malicious commands into the 'run command' input field during PDF export to achieve remote code execution.