CVE-2026-38972

Notepad3 versions 6.25.822.1 and earlier are vulnerable to a DLL search-order hijacking vulnerability within the src/Notepad3.c file's About-dialog code path. The application calls LoadLibrary(L"MSFTEDIT.DLL") using a bare DLL name, which enables a local attacker to place a malicious version of M...