CVE-2022-45025

Markdown Preview Enhanced v0.6.5 and v0.19.6 for VSCode and Atom was discovered to contain a command injection vulnerability via the PDF file import function.

CVSS v3.1 NVD

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

34.77% chance of exploitation in the next 30 days, 98th percentile

Published

2022-12-07

Updated

2025-04-23

Proof-of-concept exploits (2)

• shd101wyy/vscode-markdown-preview-enhanced/issues/6392109★ · 2026-10-09
• yuriisanin/CVE-2022-4502587★ · 2022-12-11

References

• CVE Record
• NVD entry

Related

• CVE-2022-45026
• CVE-2022-24342
• CVE-2022-25260
• CVE-2022-25262
• CVE-2022-34894
• CVE-2022-45771