CVE-2025-65716

An issue in Visual Studio Code Extensions Markdown Preview Enhanced v0.8.18 allows attackers to execute arbitrary code via uploading a crafted .Md file.

Score

CVSS 3.1 8.8 High

Status

Analyzed - cve@mitre.org

Published

2026-02-16

Last modified

2026-02-17

Weaknesses

CWE-94

Affected products

• Markdown Preview Enhanced (Shd101wyy)

References

• https://github.com/shd101wyy/markdown-preview-enhanced
• https://www.ox.security/blog/cve-2025-65716-markdown-preview-enhanced-vscode-vulnerability/