CyberSecBulletin

Rizonesoft vulnerabilities

We track 2 vulnerabilities in Rizonesoft products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 2, 2026.

2vulnerabilities
1critical
1high
0exploited
8.6average CVSS score

Latest Rizonesoft vulnerabilities

  • 7.8 High severity

    Notepad3: Uncontrolled Search Path Element

    CVE-2026-38972Rizonesoft

    Notepad3 through 6.25.822.1 contains a DLL search-order hijacking vulnerability in the About-dialog code path in src/Notepad3.c. The application calls LoadLibrary(L"MSFTEDIT.DLL") with a bare DLL name, which allows a local attacker to place a malicious MSFTEDI

  • 9.3 Critical severity

    Notepad3: Out-of-bounds Read

    CVE-2026-4744Rizonesoft

    Out-of-bounds Read vulnerability in rizonesoft Notepad3 (‎scintilla/oniguruma/src modules). This vulnerability is associated with program files regcomp.C‎. This issue affects Notepad3: before 6.25.714.1.