Vulnerability Description
A weakness has been identified in Flos Freeware Notepad2 4.2.25. This impacts an unknown function in the library TextShaping.dll. Executing a manipulation can lead to uncontrolled search path. The attack is restricted to local execution. The attack requires a high level of complexity. The exploitability is said to be difficult. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Flos-Freeware | Notepad2 | 4.2.25 |
Related Weaknesses (CWE)
References
- https://drive.google.com/file/d/1w5-ztNIN28mPuidtjlsilKsKKQQNOiIJ/viewPermissions Required
- https://vuldb.com/?ctiid.352373Permissions Required
- https://vuldb.com/?id.352373Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.774778ExploitThird Party AdvisoryVDB Entry
FAQ
What is CVE-2026-4546?
CVE-2026-4546 is a vulnerability with a CVSS score of 7.0 (HIGH). A weakness has been identified in Flos Freeware Notepad2 4.2.25. This impacts an unknown function in the library TextShaping.dll. Executing a manipulation can lead to uncontrolled search path. The att...
How severe is CVE-2026-4546?
CVE-2026-4546 has been rated HIGH with a CVSS base score of 7.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-4546?
Check the references section above for vendor advisories and patch information. Affected products include: Flos-Freeware Notepad2.