CVE-2019-12172

NONE EPSS 75.9%

Published May 17, 20197y ago · Modified Jun 17, 20262w ago

Published May 17, 2019 7y ago

Last Modified Jun 17, 2026 2w ago

Description

Typora 0.9.9.21.1 (1913) allows arbitrary code execution via a modified file: URL syntax in the HREF attribute of an AREA element, as demonstrated by file:\\\ on macOS or Linux, or file://C| on Windows. This is different from CVE-2019-12137.

Threat Intelligence

EPSS Exploit Probability

75.9% percentile

Exploit & Patch Status

Public Exploit Known

No Patch Available

Weaknesses 1

CWE-22 Path Traversal Resource Mgmt

Affected Products 4

Vendor	Product	Version	Range
typora	typora	0.9.9.21.1	any
apple	mac_os_x	*	any
linux	linux_kernel	*	any
microsoft	windows	*	any

References 1

github.com https://github.com/typora/typora-issues/issues/2166

ExploitThird Party Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.