CVE-2026-3008

Vulnerability in Notepad++

Medium · published April 27, 2026

CVSS v3.1
6.6
EPSS
0%
Percentile
7.5
In the wild
Unconfirmed
What it is

Successful exploitation of the

string injection vulnerability could allow an attacker to obtain memory address

information or crash the application.

The record
Technical detail
CVSS v3.1
6.6 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00184 · 7.5th percentile
Published
2026-04-27T06:04Z
EPSS history
Timeline
  • 27 APR 06:04Z
    Vulnerability in Notepad++
    cvelistv5