Streetwriters Notesnook Mobile — known CVE vulnerabilities

Every CVE whose affected-product data names Streetwriters Notesnook Mobile, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2026-33976 — CVSS 9.6 (critical): Notesnook is a note-taking app. Prior to version 3.3.11 on Web/Desktop and 3.3.17 on Android/iOS, a stored XSS in the Web Clipper rendering…
• CVE-2026-42090 — CVSS 9.6 (critical): Notesnook is a note-taking app focused on user privacy & ease of use. Prior to Notesnook Web/Desktop version 3.3.15 and prior to Notesnook…
• CVE-2026-31876 — CVSS 5.4 (medium): Notesnook is a note-taking app focused on user privacy & ease of use. Prior to 3.3.9, a Stored Cross-Site Scripting (XSS) vulnerability…
• CVE-2026-33978 — CVSS 5.4 (medium): Notesnook is a note-taking app focused on user privacy & ease of use. Prior to version 3.3.17, a stored XSS vulnerability exists in the…