VULNERABILITY INTELLIGENCE

CVE-2023-27035

CVSS score6.5 MEDIUM

EPSS probability1.84%

CISA KEVNot currently listed

Published2023-05-01

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Description

An issue discovered in Obsidian Canvas 1.1.9 allows remote attackers to send desktop notifications, record user audio and other unspecified impacts via embedded website on the canvas page.

Weakness classification

nvd@nist.gov: CWE-276
134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-276

Primary references

cve@mitre.org — Exploit
cve@mitre.org — Release Notes
cve@mitre.org — Exploit, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit
af854a3a-2127-422b-91ae-364da2661108 — Release Notes
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory