CVE-2026-4545CWE-426CWE-427

Flos Freeware Notepad2 PROPSYS.dll uncontrolled search path

High · published March 22, 2026

CVSS v4.0
7.3
EPSS
0%
Percentile
7.5
In the wild
Unconfirmed
What it is

A security flaw has been discovered in Flos Freeware Notepad2 4.2.25. This affects an unknown function in the library PROPSYS.dll. Performing a manipulation results in uncontrolled search path. The attack is only possible with local access. The attack is considered to have high complexity. The exploitability is reported as difficult. The vendor was contacted early about this disclosure but did not respond in any way.

The record
Technical detail
CVSS v4.0
7.3 · HIGH
Vector
CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X
EPSS
0.00184 · 7.5th percentile
Weaknesses
CWE-426 · Untrusted Search Path; CWE-427 · Uncontrolled Search Path Element
Published
2026-03-22T11:20Z
EPSS history
Timeline
  • 22 MAR 11:20Z
    Flos Freeware Notepad2 PROPSYS.dll uncontrolled search path
    cvelistv5