CVE-2026-54758

Notepad++ is a free and open-source source code editor. Prior to 8.9.7, the expandNppEnvironmentStrs function in PowerEditor/src/WinControls/StaticDialog/RunDlg/RunDlg.cpp copies a Notepad++ variable name between $ and into the fixed-size wchart strMAXPATH stack buffer without bounding the m loop...

CVE-2026-54758

Notepad++ prior to 8.9.7 contains a stack buffer overflow in the expandNppEnvironmentStrs function (RunDlg.cpp). The function copies a variable name between $( ) into a fixed-size wchar_t str[MAX_PATH] buffer without bounding the loop index, so a name of 260 or more characters can corrupt adjacen...