Lucene search
K

EUVD-2026-6122

🗓️ 16 Feb 2026 09:30:30Reported by EUVDType 
euvd
 euvd
🔗 euvd.enisa.europa.eu👁 2 Views

Flos Notepad2 flaw in versions 4.2.22–4.2.25 lets local attackers trigger uncontrolled search path in Msimg32.dll.

Related
Affected
Refs
ReporterTitlePublishedViews
Family
ATTACKERKB
CVE-2026-2538
16 Feb 202606:02
attackerkb
Circl
CVE-2026-2538
16 Feb 202609:00
circl
CNNVD
Notepad2 代码问题漏洞
16 Feb 202600:00
cnnvd
CVE
CVE-2026-2538
16 Feb 202606:02
cve
Cvelist
CVE-2026-2538 Flos Freeware Notepad2 Msimg32.dll uncontrolled search path
16 Feb 202606:02
cvelist
NVD
CVE-2026-2538
16 Feb 202607:17
nvd
Positive Technologies
PT-2026-8315
16 Feb 202600:00
ptsecurity
RedhatCVE
CVE-2026-2538
17 Feb 202607:28
redhatcve
Vulnrichment
CVE-2026-2538 Flos Freeware Notepad2 Msimg32.dll uncontrolled search path
16 Feb 202606:02
vulnrichment
[
  {
    "enisaIdVendor": [
      {
        "id": "b32312b1-17fc-4a20-be15-caafd08f443d",
        "vendor": {
          "name": "Flos Freeware"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "0093dc9b-8908-4e48-8384-cccad4a1610e",
        "product": {
          "name": "Notepad2"
        },
        "product_version": "4.2.25"
      },
      {
        "id": "8f96a7a7-a47c-4abc-9c2b-d12aa1911e1b",
        "product": {
          "name": "Notepad2"
        },
        "product_version": "4.2.24"
      },
      {
        "id": "b6c48cae-f9cf-4083-9f8c-5c683ce9eb52",
        "product": {
          "name": "Notepad2"
        },
        "product_version": "4.2.23"
      },
      {
        "id": "b78bec64-d914-4876-a418-561895e914fc",
        "product": {
          "name": "Notepad2"
        },
        "product_version": "4.2.22"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

16 Feb 2026 09:30Current
5Medium risk
Vulners AI Score5
CVSS 47.3
CVSS 26
CVSS 3.17
CVSS 37
EPSS0.00006
SSVC
2