VULNERABILITY INTELLIGENCE
CVE-2024-14010
CVSS score9.8 CRITICAL
EPSS probability1.15%
CISA KEVNot currently listed
Published2025-12-12
Last modified2026-10-27
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
Typora 1.7.4 contains a command injection vulnerability in the PDF export preferences that allows attackers to execute arbitrary system commands. Attackers can inject malicious commands into the 'run command' input field during PDF export to achieve remote code execution.
Weakness classification
- disclosure@vulncheck.com: CWE-78