CVE ID :CVE-2026-104078 Published : Oct. 8, 2026, 5:17 p.m. | 2 hours, 12 minutes ago Description :Obsidian Desktop before 1.14.0 contains a filter bypass vulnerability in the bundled MathJax 3.2.2 Safe component that allows attackers to execute arbitrary code by embedding a crafted \href...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-104078 - Obsidian Desktop < 1.14.0 RCE via MathJax Safe Filter Bypass

VERWANDTEARTIKEL

USN-8910-1: libxml2 vulnerabilities

CVE-2026-106433 - Heap corruption via duplicate masterKey fields in MongoDB libmongocrypt

CVE-2026-107704 - image_optimizer 1.3.0 through 1.9.0 OS Command Injection via identify_format

CVE-2026-107701 - dot-access through 1.0.0 Prototype Pollution via set() path argument

CVE-2026-107703 - @enmaso/node-convert through 1.0.0 OS Command Injection via filepath and convertTo

CVE-2026-107699 - ppt2png through 0.0.6 OS Command Injection via input and output paths