Evernote

12 CVEs across 4 Evernote products. Browse Evernote vulnerabilities, severities, and proof-of-concept exploits.

Evernote products with known CVEs

ProductCVEs
Evernote10
Evernote For Windows1
Web Clipper1
Yinxiang Biji1
Evernote CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2023-50643Critical9.82024-01-09An issue in Evernote Evernote for MacOS v.10.68.2 allows a remote attacker to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments compon…
CVE-2020-17759High8.82021-06-24An issue was found in the Evernote client for Windows 10, 7, and 2008 in the protocol handler. This enables attackers for arbitrary command execution if the us…
CVE-2018-19658Medium5.42020-03-02The Markdown editor in YXBJ before 8.3.2 on macOS has stored XSS. This behavior may be encountered by some Evernote users; however, it is a vulnerability in YX…
CVE-2013-5116High7.12020-01-31Evernote prior to 5.5.1 has insecure password change
CVE-2013-5112Medium4.62020-01-31Evernote before 5.5.1 has insecure PIN storage
CVE-2019-17051High7.82019-09-30Evernote before 7.13 GA on macOS allows code execution because the com.apple.quarantine attribute is not used for attachment files, as demonstrated by a one-cl…
CVE-2019-12592Medium6.12019-06-18A universal Cross-site scripting (UXSS) vulnerability in the Evernote Web Clipper extension before 7.11.1 for Chrome allows remote attackers to run arbitrary w…
CVE-2019-10038High7.82019-05-31Evernote 7.9 on macOS allows attackers to execute arbitrary programs by embedding a reference to a local executable file such as the /Applications/Calculator.a…
CVE-2018-18524Medium6.12019-05-13Evernote 6.15 on Windows has an incorrectly repaired stored XSS vulnerability. An attacker can use this XSS issue to inject Node.js code under Present mode. Af…
CVE-2018-20351Medium6.12018-12-22The Markdown component in Evernote (Chinese) before 8.3.2 on macOS allows stored XSS, aka MAC-832.
CVE-2018-20058High7.52018-12-11In Evernote before 7.6 on macOS, there is a local file path traversal issue in attachment previewing, aka MACOSNOTE-28634.
CVE-2016-4900High7.82017-05-22Untrusted search path vulnerability in Evernote for Windows versions prior to 6.3 allows remote attackers to gain privileges via a Trojan horse DLL in an unspe…