Vulnerabilities

TI-2026-28238 CVE-2026-38972 · GHSA-gmg7-w8wv-j7v2

Notepad3 through 6.25.822.1 contains a DLL search-order hijacking vulnerability in the…

HIGH 69

Notepad3 through 6.25.822.1 contains a DLL search-order hijacking vulnerability in the About-dialog code path in src/Notepad3.c.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0019 Published 2026-07-02 No fix listed CWE-427

TI-2026-04139 CVE-2026-4744 · GHSA-wfh3-g987-f73h

MEDIUM 41

Out-of-bounds Read vulnerability in rizonesoft Notepad3 (‎scintilla/oniguruma/src modules).

CVSS 4.0CRITICAL 9.3 Local No auth User interaction EPSS 0.00122 Published 2026-03-24 Fixed CWE-125

TI-2024-01103 CVE-2024-1188 · GHSA-gc37-v9fg-72xc

MEDIUM 58

A vulnerability, which was classified as problematic, was found in Rizone Soft Notepad3 1.0.2.350.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00205 Published 2024-02-02 No fix listed CWE-404