Notepad3 vulnerabilities

2 known vulnerabilities in Notepad3 from Rizonesoft. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Notepad3: Uncontrolled Search Path Element

  CVE-2026-38972Jul 2, 2026Rizonesoft

  Notepad3 through 6.25.822.1 contains a DLL search-order hijacking vulnerability in the About-dialog code path in src/Notepad3.c. The application calls LoadLibrary(L"MSFTEDIT.DLL") with a bare DLL name, which allows a local attacker to place a malicious MSFTEDI

• 9.3 Critical severity

  Notepad3: Out-of-bounds Read

  CVE-2026-4744Mar 24, 2026Rizonesoft

  Out-of-bounds Read vulnerability in rizonesoft Notepad3 (‎scintilla/oniguruma/src modules). This vulnerability is associated with program files regcomp.C‎. This issue affects Notepad3: before 6.25.714.1.