CVE-2026-4546

A weakness has been identified in Flos Freeware Notepad2 4.2.25. This impacts an unknown function in the library TextShaping.dll. Executing a manipulation can lead to uncontrolled search path. The attack is restricted to local execution. The attack requires a high level of complexity. The exploitability is said to be difficult. The vendor was contacted early about this disclosure but did not respond in any way.

Score

CVSS 4.0 7.3 High

Status

Analyzed - cna@vuldb.com

Published

2026-03-22

Last modified

2026-03-23

Weaknesses

CWE-426, CWE-427

Affected products

• Notepad2 (Flos-freeware)
• Notepad2 (Flos Freeware)

References

• https://drive.google.com/file/d/1w5-ztNIN28mPuidtjlsilKsKKQQNOiIJ/view
• https://vuldb.com/?ctiid.352373
• https://vuldb.com/?id.352373
• https://vuldb.com/?submit.774778