don ho notepad++ vulnerabilities (CVE)

CVE records published for don ho notepad++, newest first. Follow to get an email when a new one appears.

1 results
4.4Medium
CVE-2026-6539

Notepad++ 8.9.3 Format String Injection via nativeLang.xml

Notepad++ Notepad++

Notepad++ 8.9.3 contains a format string injection vulnerability in the Find Results panel handler that allows attackers to cause denial of service and information disclosure by crafting a malicious nativeLang.xml language pack file. Attackers can distribute …