What’s Vulnerable › Vulnerabilities

CVE-2023-33244

• Severity: high (CVSS 8.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-05-20 · updated 2026-06-17

Description

Obsidian before 1.2.2 allows calls to unintended APIs (for microphone access, camera access, and desktop notification) via an embedded web page.

Affected products

• Obsidian: before 1.2.2 — fixed in 1.2.2

How to fix

Upgrade to a fixed version: Obsidian 1.2.2. Check the vendor advisory for mitigations.

References

• https://forum.obsidian.md/t/obsidian-release-v1-2-2-insider-build/57488
• https://vuln.ryotak.net/advisories/66
• https://forum.obsidian.md/t/obsidian-release-v1-2-2-insider-build/57488
• https://vuln.ryotak.net/advisories/66

Get alerted when CVE-2023-33244 or the next vulnerability affects your stack