Description of the security update for SharePoint Server 2016 Language Pack: June 9, 2026 (KB5002881)

None None...

CVE-2026-6539

Notepad++ 8.9.3 contains a format string injection vulnerability in the Find Results panel handler that allows attackers to cause denial of service and information disclosure by crafting a malicious nativeLang.xml language pack file. Attackers can distribute a poisoned language pack through...

Description of the security update for SharePoint Server 2016 Language Pack: May 12, 2026 (KB5002869)

None None...

Description of the security update for SharePoint Server 2019 Language Pack: May 12, 2026 (KB5002872)

None None...

CVE-2026-6539

Notepad++ 8.9.3 contains a format string injection vulnerability in the Find Results panel handler that allows attackers to cause denial of service and information disclosure by crafting a malicious nativeLang.xml language pack file. Attackers can distribute a poisoned language pack through...

CVE-2026-6539

Notepad++ 8.9.3 contains a format string injection vulnerability in the Find Results panel handler that allows attackers to cause denial of service and information disclosure by crafting a malicious nativeLang.xml language pack file. Attackers can distribute a poisoned language pack through...

CVE-2026-6539 Notepad++ 8.9.3 Format String Injection via nativeLang.xml

Notepad++ 8.9.3 contains a format string injection vulnerability in the Find Results panel handler that allows attackers to cause denial of service and information disclosure by crafting a malicious nativeLang.xml language pack file. Attackers can distribute a poisoned language pack through...

CVE-2026-6539

Notepad++ 8.9.3 is affected by a vulnerability described as a format string injection in the Find Results panel handler, triggered by a malicious nativeLang.xml language pack. The issue can be introduced by poisoned language packs distributed via community channels and triggers format string inte...

EUVD-2026-26436

Notepad++ 8.9.3 contains a format string injection vulnerability in the Find Results panel handler that allows attackers to cause denial of service and information disclosure by crafting a malicious nativeLang.xml language pack file. Attackers can distribute a poisoned language pack through...

PT-2026-36185

Name of the Vulnerable Software and Affected Versions Notepad++ version 8.9.3 Description A format string injection exists in the Find Results panel handler. This occurs when the application processes a maliciously crafted nativeLang.xml language pack file. An attacker can distribute a poisoned...

Description of the security update for SharePoint Server 2019 Language Pack: April 14, 2026 (KB5002856)

None None...

Description of the security update for SharePoint Server 2016 Language Pack: April 14, 2026 (KB5002862)

None None...

Description of the security update for SharePoint Server 2019 Language Pack: March 10, 2026 (KB5002847)

None None...

Description of the security update for SharePoint Server 2016 Language Pack: March 10, 2026 (KB5002851)

None None...

Description of the security update for SharePoint Server 2019 Language Pack: February 10, 2026 (KB5002836)

None None...

Description of the security update for SharePoint Server 2016 Language Pack: February 10, 2026 (KB5002840)

None None...

Description of the security update for SharePoint Server 2019 Language Pack: January 13, 2026 (KB5002823)

None None...

Description of the security update for SharePoint Server 2016 Language Pack: January 13, 2026 (KB5002827)

None None...

Description of the security update for SharePoint Server 2019 Language Pack: December 9, 2025 (KB5002802)

None None...

Description of the security update for SharePoint Server 2016 Language Pack: December 9, 2025 (KB5002804)

None None...