Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A security flaw has been discovered in Flos Freeware Notepad2 4.2.22/4.2.23/4.2.24/4.2.25. Affected is an unknown function in the library Msimg32.dll. Performing a manipulation results in uncontrolled search path. Attacking locally is a requirement. The attack's complexity is rated as high. The exploitability is told to be difficult. The vendor was contacted early about this disclosure but did not respond in any way.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-02-16 | 3 | Disclosure2General1 |
| 2026-02-20 | 1 | Disclosure1 |
CVE-2026-2538 Uncontrolled Search Path Vulnerability in Flos Freeware Notepad2 4.2.22-4.2.25 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-2538
Post summary
A vulnerability disclosure for CVE-2026-2538, describing an uncontrolled search path issue affecting Flos Freeware Notepad2 4.2.22‑4.2.25, with no additional exploit or patch details.
CVE-2026-2538 (CVSS:7.3, HIGH) is Awaiting Analysis. A security flaw has been discovered in Flos Freeware Notepad2 4.2.22/4.2.23/4.2.24/4.2.25. Affected is an unknown functi..https://nvd.nist.gov/vuln/detail/CVE-2026-2538 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
A new vulnerability, CVE-2026-2538, has been identified in Flos Freeware Notepad2 with a high CVSS score, but no PoC, exploit, or patch information is provided.
🚨 High-severity vuln in Notepad2 (v4.2.22 – 4.2.25): Local attackers can hijack DLL search path for code execution — no patch yet! Restrict access & monitor endpoints. Details: https://radar.offseq.com/threat/cve-2026-2538-uncontrolled-search-path-in-flos-fre-d9540b5b #OffSeq ... https://t.co/RHlwlLxtuX
Post summary
Notepad2 v4.2.22‑4.2.25 is vulnerable to a DLL search path hijack that can lead to local code execution; no patch is available yet, so restrict access and monitor endpoints.
CVE-2026-2538 A security flaw has been discovered in Flos Freeware Notepad2 4.2.22/4.2.23/4.2.24/4.2.25. Affected is an unknown function in the library Msimg32.dll. Performing a mani… https://www.cve.org/CVERecord?id=CVE-2026-2538
Post summary
The text announces the discovery of CVE-2026-2538 affecting Notepad2 via Msimg32.dll, but lacks details on exploitation, patches, or technical specifics.