Approved changes feed: RSS · Atom

cpe:2.3:a:flos_freeware:notepad2:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorFlos Freeware (afc7d9a8-b055-5965-a240-aa17bdc1e4df)
ProductNotepad2 (775424f3-f84d-56aa-a700-40b5c41a5d2f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-4546 vulnerable 2026-06-08 08:05:13.514295 Flos Freeware Notepad2 TextShaping.dll uncontrolled search path
HIGH (7)
A weakness has been identified in Flos Freeware Notepad2 4.2.25. This impacts an unknown function in the library TextShaping.dll. Executing a manipulation can lead to uncontrolled search path. The attack is restricted to local execution. The attack requires a high level of complexity. The exploitability is said to be difficult. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-03-22T13:02:40.125Z
Updated: 2026-03-23T16:39:39.426Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-4545 vulnerable 2026-06-08 08:05:13.512460 Flos Freeware Notepad2 PROPSYS.dll uncontrolled search path
HIGH (7)
A security flaw has been discovered in Flos Freeware Notepad2 4.2.25. This affects an unknown function in the library PROPSYS.dll. Performing a manipulation results in uncontrolled search path. The attack is only possible with local access. The attack is considered to have high complexity. The exploitability is reported as difficult. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-03-22T11:20:57.774Z
Updated: 2026-03-24T14:34:17.765Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-2538 vulnerable 2026-06-08 07:55:17.191989 Flos Freeware Notepad2 Msimg32.dll uncontrolled search path
HIGH (7)
A security flaw has been discovered in Flos Freeware Notepad2 4.2.22/4.2.23/4.2.24/4.2.25. Affected is an unknown function in the library Msimg32.dll. Performing a manipulation results in uncontrolled search path. Attacking locally is a requirement. The attack's complexity is rated as high. The exploitability is told to be difficult. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-02-16T06:02:06.344Z
Updated: 2026-02-23T10:06:24.457Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.