3 matches found
CVE-2026-42214
Notepad Next is a cross-platform, reimplementation of Notepad++. Prior to version 0.14, NotepadNext's detectLanguageFromExtension function interpolates a file's extension directly into a Lua script without sanitization. An attacker can craft a filename whose extension contains Lua code, which...
7.8CVSS6.2AI score0.00242EPSS
SaveExploits1References4Affected Software1
Notepad++ File Manager XSS
The vulnerability of the FileManager::detectLanguageFromTextBegining function in the Notepad++ text editor is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
5.5CVSS6.6AI score0.00414EPSS
SaveExploits1References2Affected Software1
20