Skip to content
OpenAdvisories

Vendor

Notepad++

2 known vulnerabilities.

Products

Notepad++ 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.4
    CVE-2026-6539

    Notepad++ 8.9.3 Format String Injection via nativeLang.xml

    Notepad++ 8.9.3 contains a format string injection vulnerability in the Find Results panel handler that allows attackers to cause denial of service and information disclosure by crafting a malicious nativeLang.xml language pack file. Attackers can distribute …

    Notepad++ Notepad++
  • Medium 6.6
    CVE-2026-3008 Public exploit

    Vulnerability in Notepad++

    Successful exploitation of the string injection vulnerability could allow an attacker to obtain memory address information or crash the application.

    Notepad++ Notepad++