Evernote makes products that are the go-to apps for millions of people worldwide accomplishing their most important work. It's important to us that your experience be both private and secure. We proactively test our products for security issues and regularly squash bugs that could create vulnerabilities in our apps.
Notes are stored in notebooks and can be tagged, annotated, edited, searched, given attachments, and exported. Evernote is cross-platform, for Android, iOS, macOS, and Microsoft Windows. It is free to use with monthly usage limits, and offers paid plans for expanded or lifted limits. Evernote version 10 is a complete re-write of desktop clients.
Here you'll find a list of the most recent security bugs that we've fixed. We'll update this page anytime we release an app that has a security update. (Note: Reporting began on March 1st, 2015. Fixes released prior to this date do not appear.)
- The Evernote Corporation has unveiled Evernote 10.0, a landmark new release of its cross-platform note-creation and organisation tool.The free and paid-for service allows users to create, organise, share, and view notes across all major platforms, including the web, Windows, Mac, iOS, and Android.
- Evernote v6.16.1 Release Notes (macOS) Close. Posted by 3 months ago. Evernote v6.16.1 Release Notes (macOS) macOS release notes for the latest Preview version, but likely to be applicable to Windows and Linux as well. New: Select multiple notes in the note list.
To stay up-to-date with security patches, check back here or in our app release notes.
Evernote for Mac
| Ticket Id | Description | Fixed Release |
|---|---|---|
| MACOSNOTE-28956 | Added com.apple.quarantine attribute to attachment files to prevent potential one click execution. | Evernote for Mac 7.13 GA |
| MACOSNOTE-28914 | Fixed a potential dylib hijacking issue. | Evernote for Mac 7.12 GA |
| MACOSNOTE-28840 | Fixed a regression and added the prompt before opening any file:// URIs. | Evernote for Mac 7.10 Beta 1 and 7.9.1 GA |
| MACOSNOTE-28634 | Fixed a local file path traversal issue on attachment previewing. | Evernote for Mac 7.6 |
| MACOSNOTE-12400 | Added a prompt before opening any file:// URIs. | Evernote for Mac 6.6 |
| MACOSNOTE-18729 | Improved NSConnection usage with NSProtocolChecker to protect the cross application IPC channel. | Evernote for Mac 6.3 |
Evernote for Windows
| Ticket Id | Description | Fixed Release |
|---|---|---|
| WINNOTE-20063 | Fixed a stored cross site scripting (XSS) vulnerability in modified external web links. | Evernote for Windows 6.19 GA |
| WINNOTE-19941 | Fixed a vulnerability in the protocol handler, specifically Evernote client installed on Windows 10, 7 or 2008 can be tricked in arbitrary command execution if the user clicks on a specially crafted URL. | Evernote for Windows 6.18 beta 2 and 6.17.7 GA |
| WINNOTE-19568, WINNOTE-19620 | Fixed a stored cross site scripting (XSS) issue in rendering attachment filenames. | Evernote for Windows 6.16 beta 1 and 6.16 GA |
| WINNOTE-19377 | Improved security by always generating HTTPS URLs to Evernote services. | Evernote for Windows 6.15 beta 1 and 6.15 GA |
| WINNOTE-19299 | Fixed an issue in versions 6.4 - 6.7 where the app would send authentication tokens over HTTP when contacting certain portions of the Evernote Service. The vulnerability did not affect note content, usernames, or passwords and those continued to be securely encrypted in transit. | Evernote for Windows versions 6.7.6 (Hotfix) and 6.8.6 (First GA release) |
| WINNOTE-15870 | Fixed a potential stored cross site scripting (XSS) issue on Google Drive integration. | Evernote for Windows 6.4 |
| WINNOTE-15637, WINNOTE-8970 | Fixed DLL hijacking/preloading vulnerabilities on installer and other binaries. | Evernote for Windows 6.3 |
| WINNOTE-14610 | Delete the local data in the original folder when the local folder configuration is changed. | Evernote for Windows 6.1.2 |
| WINNOTE-13340, WINNOTE-13475, WINNOTE-13472 | Fixed several stored XSS (cross-site scripting) issues in activity view and other web views. | Evernote for Windows 5.9.5 |
| WINNOTE-8997 | Added a warning to users before opening local files. | Evernote for Windows 5.8.11 |
| CE-735 | Fixed a stored XSS (cross-site scripting) issue in Related Context by properly rendering the context note snippet. | Evernote for Windows 5.8.4 |
Evernote for iOS
| Ticket Id | Description | Fixed Release |
|---|---|---|
| IOSNOTE-27747 | Fixed an issue that saved screenshot might show up prior to PIN lock screen for a short time period. | Evernote for iOS 8.16 |
| IOSNOTE-28074 | Fixed a PIN lock bypass issue. | Evernote for iOS 8.2 |
| IOSNOTE-22342 | Updated the keychain items accessibility attribute in iTunes/iCloud backups. | Evernote for iOS 7.14 |
| IOSNOTE-19688, CP-3280 | Fixed the WebViews that disables same-origin policy using file:// URLs. | Evernote for iOS 7.7.7 |
| IOSNOTE-19338 | Upgraded vulnerable SDWebImage library to 3.7.2. | Evernote for iOS 7.7.2 |
Evernote for Android
| Ticket Id | Description | Fixed Release |
|---|---|---|
| DRDNOTE-30711 | Fixed an issue where certain third party content providers were identified by their package names rather than package signatures. | Evernote for Android 8.12.2 |
| DRDNOTE-31085 | Fixed an issue where the Widget4x1SettingsActivity/Widget4x2SettingsActivity activities may be exploited through a malicious Intent. | Evernote for Android 8.12.2 |
| DRDNOTE-31086 | Fixed an issue where the NewPhoneMainActivity activity may be exploited through a malicious Intent. | Evernote for Android 8.12.2 |
| DRDNOTE-31087 | Fixed an issue where the ContractNoUiActivity activity may be exploited through a malicious Intent. | Evernote for Android 8.12.2 |
| DRDNOTE-31088 | Fixed an issue where the URIBrokerActivity activity may be exploited through a malicious Intent. | Evernote for Android 8.12.2 |
| DRDNOTE-31089 | Fixed an issue where the AuthorizeThirdPartyAppActivity activity may be exploited through malicious Intent. | Evernote for Android 8.12.2 |
| DRDNOTE-31090 | Fixed an issue where the ClipActivity activity may be exploited through malicious Intent. | Evernote for Android 8.12.2 |
| DRDNOTE-31033 | Fixed an issue in an exported Activity that might be exploited through malicious Intent. | Evernote for Android 8.12 |
| DRDNOTE-30932 | Fixed a PIN lock bypass issue in Android's Google Search integration. | Evernote for Android 8.11 |
| DRDNOTE-30589, DRDNOTE-30753 | Fixed a PIN lock bypass issue. | Evernote for Android 8.9 |
| DRDNOTE-24142 | Fixed a PIN lock bruteforcing issue. | Evernote for Android 7.9.9 |
| DRDNOTE-23054 | Fixed a potential stored cross site scripting (XSS) issue on Google Drive integration. | Evernote for Android 7.9.5 |
| DRDNOTE-20794, DRDNOTE-22660 | Fixed a PIN lock bypass issue. | Evernote for Android 7.9.4 |
| DRDNOTE-20842 | Fixed an issue that some WebView could ignore SSL certificate errors in debug/internal builds. | Evernote for Android 7.6 |
| DRDNOTE-9500, DRDNOTE-11183 | Move notes stored in SD card to internal memory. | Evernote for Android 7.0.7 |
Evernote for BlackBerry
| Ticket Id | Description | Fixed Release |
|---|---|---|
| EFB-1836 | Fixed an issue that PIN lock can be bypassed. | Evernote for BlackBerry 5.6.2 |
Web Clipper 7 for Chrome
| Ticket Id | Description | Fixed Release |
|---|---|---|
| CLIPPER-2673 | Fixed several issues by validating events, adding clickjacking protection and etc. | Evernote Clipper 7 for Chrome 7.12.2.1 |
| CLIPPER-2582 | Fixed an issue that could cause browser's same origin policy to be bypassed. | Web Clipper 7 for Chrome 7.11.1 |
| CLIPPER-1371 | Fixed an issue regarding automated notebook suggestions. | Web Clipper 7 for Chrome 7.2.1 |
Web Clipper 6 for Chrome
| Ticket Id | Description | Fixed Release |
|---|---|---|
| CC-3860 | Fixed a potential cross site scripting (XSS) issue. | Web Clipper 6 for Chrome 6.13.2 |
| CC-2561 | Fixed a potential cross site scripting (XSS) issue while clipping from a malicious site. | Web Clipper 6 for Chrome 6.9.2 |
| CC-1729 | Fixed a potential HTML injection issue through the extension's login page. | Web Clipper 6 for Chrome 6.7 |
| CC-1693 | Fixed a potential stored cross site scripting (XSS) issue in releated search results. | Web Clipper 6 for Chrome 6.6 |
Web Clipper 6 for Safari
| Ticket Id | Description | Fixed Release |
|---|---|---|
| CC-3860 | Fixed a potential cross site scripting (XSS) issue. | Web Clipper 6 for Safari 6.13.2 |
| SAFARICLIP-992 | Fixed a potential stored cross site scripting (XSS) issue in releated search results. | Web Clipper 6 for Safari 6.7 |
Penultimate for iOS
| Ticket Id | Description | Fixed Release |
|---|---|---|
| IOSPENULT-4056 | Updated adonit SDK to fetch all web content through HTTPS. | Penultimate for iPad 6.2 |
Evernote Food for iOS
| Ticket Id | Description | Fixed Release |
|---|---|---|
| IOSFOOD-4320 | Upgraded vulnerable SDWebImage library to 3.7.2. | Evernote Food for iOS 2.5.1 |
| We have ended support for this product and will not be providing any future security updates. | September 30, 2015 |
Skitch for iOS
| Ticket Id | Description | Fixed Release |
|---|---|---|
| We have ended support for this product and will not be providing any future security updates. | January 22, 2016 |
Skitch for Android
| Ticket Id | Description | Fixed Release |
|---|---|---|
| We have ended support for this product and will not be providing any future security updates. | January 22, 2016 |
Skitch for Windows Touch
| Ticket Id | Description | Fixed Release |
|---|---|---|
| We have ended support for this product and will not be providing any future security updates. | January 22, 2016 |
Skitch for Windows
| Ticket Id | Description | Fixed Release |
|---|---|---|
| We have ended support for this product and will not be providing any future security updates. | January 22, 2016 |
Evernote Clearly
| Ticket Id | Description | Fixed Release |
|---|---|---|
| We have ended support for this product and will not be providing any future security updates. | January 22, 2016 |
Evernote for Pebble
| Ticket Id | Description | Fixed Release |
|---|---|---|
| We have ended support for this product and will not be providing any future security updates. | January 22, 2016 |
Description:
Note Station helps you fully enjoy writing, viewing, managing, and sharing content-rich notes. It is very easy to create content with rich text editing, media embedding, attachments, and much more. Manage your notes by using tags and grouping notes into Notebooks. When you are ready, Note Station makes sharing your content via social networking platforms simple and quick. Create, share, and enjoy!
Version: 2.6.0-1407
Evernote Release Notes Pdf
Important Notes
- If you have encountered any login issues after updating Note Station to 2.6.0-1406, please update to this version.
What's New
- Supports disabling the spell checker to exclude certain kinds of text (e.g., programming code) from being underlined in red.
- Supports multi-selecting images to insert into a note at a time.
- Added the following font types: Calibri, Cambria, Consolas, Courier, Helvetica Neue, Lucida Console, Lucida Sans Unicode, Roman, PMingLiU, MingLiU, DFKai-SB, Microsoft JhengHei, Microsoft YaHei, SimSun, NSimSun, KaiTi, and SimHei.
- Supports opening a new tab to view an inserted image in its original size for better viewing experience.
- Supports using hotkeys to delete notes (Delete), sync notes (Ctrl+S), search contents (Ctrl+Shift+F), and more.
- Revamped the shelf display for better note classification and browsing.
- Revamped the editor toolbar display in the edit mode.
Fixed Issues
- Fixed the issue where non-admin users could not sign in to Note Station.
- Fixed the issue where the font size of an inserted link could not be adjusted.
- Fixed the issue where images could not be deleted consecutively.
- Fixed the issue where Google Street View could not display on the Location page.
- Fixed the issue where charts could not display in the Present mode.
- Enhanced Chinese and Japanese search results.
Limitations
- Starting from this version, Note Station no longer supports sharing notes via email, LinkedIn, Facebook, Google+, Twitter, and Plurk.
Version: 2.6.0-1406
Important Notes
- This version is replaced by Note Station 2.6.0-1407 to fix an issue where non-admin users could not sign in to Note Station in DSM 6.2.3 Update 3.
Version: 2.5.5-0870
- Improved overall performance
- Adjusted date and time format
- Fixed an issue where Chrome 74 might fail to connect via HTTP
- Fixed an issue where photos inserted into notes could not be displayed
- Fixed an issue where notes might not be deleted successfully
- Minor bug fixes
Version: 2.5.4-0864
Evernote Release Notes Download
- Minor bug fixes.
Version: 2.5.3-0863
- Fixed an issue where attached files cannot be displayed on third-party applications.
- Fixed a security vulnerability. (Synology-SA-19:08)
- Minor bug fixes.
Version: 2.5.2-0853
Thai user interface is now available.
Fixed an issue where note might fail to be sent by email.
Fixed an issue where note might fail to export as .docx file.
Fixed an issue where it might fail to import .enex file.
Minor bugs fixes.
Version: 2.5.1-0844
Fixed an issue where .nsx files of a specific format might fail to be imported.
Fixed multiple security vulnerabilities. (Synology-SA-18:03)
Minor bugs fixes.
Version: 2.5.0-0839
Supports precise search, which only returns note titles, content, and attachment names that are exact matches of your keyword as results when you place the keyword inside double quotation marks.
Supports saving files by “Ctrl+S” in the editor.
Minor bugs fixes.
Version: 2.4.6-0827
Fixed an issue where Evernote files might fail to be imported.
Fixed an issue where tags in Evernote XML files might not be imported.
Fixed an issue where note content might be reloaded when users click “Sync Now”.
Minor bugs fixes.
Version: 2.4.5-0824
- Fixed an issue where Note Station for desktop might fail to be downloaded.
- Fixed an issue where images might fail to be copied and pasted from Note Station to other document editors.
- Fixed an issue where users cannot type Chinese and Japanese in title fields.
- Minor bug fixes.
Version: 2.4.4-0822
- Note Station for desktop is available now.
- Fixed an issue where color customization might not work properly.
- Fixed an issue where a tag might disappear from Favorites when its sub tags are adjusted.
- Fixed an issue where images might fail to be dragged & dropped from File Station to notes as attachments.
- Fixed an issue where the size of other images might be affected when a certain image’s size is adjusted.
- Minor bug fixes.
Version: 2.4.3-0810
- Fixed an issue where adjustment of text size might fail.
- Fixed an issue where the numbered list/bulleted list buttons in the editing toolbar might not be properly displayed.
- Fixed an issue where the deletion of in-note GPS info might fail.
- Fixed an issue where users might not be able to remove in-note hyperlinks.
- Fixed an issue where the print page might not be opened when users click “Print” on the in-note right key menu.
- Minor bug fixes.
Version: 2.4.2-0629
- Enhanced the usability of color pickers.
- Supports using the keyboard Tab key to navigate the cursor to the next and previous cells in a table.
- Supports searching for notes in a publicly shared notebook.
- Fixed an issue where sending a note including an attachment or checkbox as an email might fail.
- Fixed an issue where the highlight feature might not work properly in FireFox.
- Minor bug fixes.
Version: 2.4.1-0619
- Fixed an issue where clipping web content into a note via DS note might fail.
- Fixed an issue where backing up Note Station with massive notes via Hyper Backup might fail.
- Fixed an issue where keyword search for notes might show incorrect results.
- Fixed an issue where font size in shared notes might be incorrect.
- Minor bugs fixes.
Version: 2.4.0-0615
- Supports moving data storage from one volume to another.
- Provides uninterrupted service when Note Station is being backed up by Hyper Backup.
- Enhanced table usability.
- Maintains correct content format in the 'Present' mode.
- Fixed an issue where users might fail to remove permissions from a group that has been deleted.
- Minor bugs fixes
Version: 2.3.0-0547
- Supports finding notes in Note Station via Synology Universal Search (DSM 6.1 Beta or above required).
- Fixed an issue where copying and pasting images from Note Station to Google Docs and Microsoft Office Online might fail.
- Minor bug fixes.
Version: 2.2.0-0538
- Support users to import Evernote .enex files to Note Station.
- Fixed an issue where syncing notes between Note Station and Chrome Note Station might fail.
- Fixed an issue where displaying chart might fail in presentation mode.
- Fixed an issue where exporting notes to .docx files might fail.
- Fixed an issue where the keyboard arrow key might not work when editing subtask title.
- Minor bug fixes.
Version: 2.1.0-0528
- Added support for nested tags for note management.
- Added support for exporting notes as .docx files.
- Added the 'Intersect selected' option for advanced search by tag.
- Fixed an issue where image alignment settings might not be saved.
- Fixed an issue where attached audio files in notes might not be properly played.
- Minor bug fixes.
Version: 1.1-0215
- Fixed an issue where .nsx files exported from iOS DS note could not be imported to Note Station.
- Fixed an issue where images clipped from websites by Synology Web Clipper might not be displayed.
- Enhanced search accuracy when using multiple keywords.
- Minor bug fixes.
Version: 2.0-0513
- Offline Note Station is now available in Chrome Web Store. You can create and edit notes or to-do lists without Internet connection, and all updates will be synchronized to Note Station in DSM when the Internet is connected.
- Use Synology Web Clipper to save selected content of MailPlus or Gmail to Note Station.
- Convert tables into charts, including line charts, bar charts, and pie charts.
- Choose a template for your presentation.
- Click to expand images to their original size in presentation mode.
- Apply heading formats to texts to switch slides in presentation mode.
- Create Smart Notebooks according to different criteria. Existing and future notes that match the criteria will be automatically added to the Smart Notebook.
- Insert the internal link of another note and open it directly via the hyperlink.
- The search feature in Note Station now includes results based on the content of attached files of various formats, including PDF, Office, Open Office, and iWork file.
- The attachments in PDF, word, excel, and powerpoint formats can be previewed in Note Station directly with the Document Viewer package.
- You can add stars, remarks and subtasks to to-do tasks.
- You can share notes or notebooks with a group.
- Supports exporting/importing to-do tasks for backup.
- Allows you to output to-do tasks to a new note and customize its display options.
Version: 1.1-0214
- Fixed a security issue to prevent cross-site scripting attacks.
- Minor bug fixes.
Version: 1.1-0212
- Adjusted file format of exported notebooks for enhanced exporting performance and compatibility.
- Fixed an issue where copying images to notes might fail.
Version: 1.1-0211
Evernote Release Notes Login
This is the initial release to add support for DS216play.
- Fixed a security issue to prevent cross-site scripting (XSS) attacks.
- Enhanced the stability of capturing web content using Synology Web Clipper.
- Enhanced the stability of inserting images to notes.
- Fixed an issue where the feature of DSM timeout might fail if the todo badge is enabled.
- Minor bug fixes.
Version: 1.1-0207
- Fixed an issue where text on the Public Sharing page might be garbled in QQ Browser on mobile devices.
- Fixed an issue where tags could not be deleted all at once on the Info page.
- Minor bug fixes.
Evernote Release Notes Template
Version: 1.1-0205
- Added to-do list feature. You can add tasks to notes or add them independently to the to-do list.
- Manage tasks by specifying a priority, due date, and reminder.
- Synology Web Clipper is now available on the Chrome Web Store. You can clip web content directly to Note Station.
- Export notebooks to a nsx file for backup or for importing to another Synology NAS.
- Export individual notes as HTML files so that users without Note Station can read them.
- You can archive seldomly used notebooks so that they will not be displayed in the notebook section or in search results.
- Enhanced Note Station file structure. A three-tier structure (Shelf, Notebook, and Note) provides greater flexibility for organizing Note Station.
- You can display notes in presentation mode.
- You can create new notes in a joined notebook if you were given modify permissions.
- You can share notes via the built-in DSM email application.
- You can change the default notebook.
- You can adjust the default note font size.
- Import notes from YinXiangBiJi.
- Better note version conflict handling.
- Todo badge number on Desktop icon.
Version: 1.0-0074
Fixed Issues
- Enhanced the stability for importing notebooks from Evernote.
- Fixed an issue where deleted notes might still be accessible in tag views.
- Fixed an issue where deleting encrypted notes via the right-click menu might not work properly.
- The display order of notebooks in the tree view is now sorted by notebook name.
- Minor bug fixes.
Version: 1.0-0069
Evernote Release Notes
- This is the initial release for the package.