CVE-2026-4546CWE-426CWE-427

Flos Freeware Notepad2 TextShaping.dll uncontrolled search path

High · published March 22, 2026

CVSS v4.0
7.3
EPSS
0%
Percentile
12.3
In the wild
Unconfirmed
What it is

A weakness has been identified in Flos Freeware Notepad2 4.2.25. This impacts an unknown function in the library TextShaping.dll. Executing a manipulation can lead to uncontrolled search path. The attack is restricted to local execution. The attack requires a high level of complexity. The exploitability is said to be difficult. The vendor was contacted early about this disclosure but did not respond in any way.

The record
Technical detail
CVSS v4.0
7.3 · HIGH
Vector
CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X
EPSS
0.00224 · 12.3th percentile
Weaknesses
CWE-426 · Untrusted Search Path; CWE-427 · Uncontrolled Search Path Element
Published
2026-03-22T13:02Z
EPSS history
Timeline
  • 22 MAR 13:02Z
    Flos Freeware Notepad2 TextShaping.dll uncontrolled search path
    cvelistv5