Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Obsidian Desktop 1.14.0 Clear all filters
TI-2026-69631 CVE-2026-104078 · GHSA-4pcg-gm3h-3m4r

Remote code execution in Obsidian Desktop via MathJax filter bypass

Priority LOW 38

Obsidian Desktop before 1.14.0 contains a filter bypass vulnerability in the bundled MathJax 3.2.2 Safe component that allows attackers to execute arbitrary code by embedding a crafted \href value with a TAB byte in the…

CVSS 4.0HIGH 8.4 Local No auth User interaction EPSS 0.00168 Published 2026-10-08 Fixed in 1.14.0 CWE-1188
TI-2026-69630 CVE-2026-104077 · GHSA-fj5r-pww3-qc5p

Remote code execution in Obsidian Desktop via crafted Markdown notes

Priority LOW 38

Obsidian Desktop before 1.14.0 contains a remote code execution vulnerability that allows attackers to craft malicious Markdown notes exploiting insufficient sanitization of the data-background-iframe attribute, which by…

CVSS 4.0HIGH 8.5 Local No auth User interaction EPSS 0.00257 Published 2026-10-08 Fixed in 1.14.0 CWE-1188