Skip to content
OpenAdvisories
Critical · 9.3 CVE-2026-4744 EUVD-2026-14702GHSA-wfh3-g987-f73h

Notepad3 Bundled Oniguruma compile_string_node() Heap Buffer Overflow via Crafted Regex Pattern Allows Arbitrary Code Execution

Published Mar 24, 2026 · Updated Mar 24, 2026 · Assigned by GovTech CSG

Description

Out-of-bounds Read vulnerability in rizonesoft Notepad3 (‎scintilla/oniguruma/src modules). This vulnerability is associated with program files regcomp.C‎.

This issue affects Notepad3: before 6.25.714.1.

Affected products

VendorProductAffectedFixed
rizonesoft Notepad3 — —

References