CVE-2025-65716: SHD101WYY Markdown Preview Enhanced

High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days.

An issue in Visual Studio Code Extensions Markdown Preview Enhanced v0.8.18 allows attackers to execute arbitrary code via uploading a crafted .Md file.

Affected products

• SHD101WYY Markdown Preview Enhanced: from 0.8.18

Published 2026-02-16. Last modified 2026-06-17.