PT-2026-8315 · Flos+1 · Notepad2+1

Cyber-Wo0Dy · Publicado 2026-02-16 · Atualizado 2026-02-21 · CVE-2026-2538

Positive Technologies (AI Summary)

CVSS v3.1

7.0

Alta

Vetor base

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Flos Freeware Notepad2 versions 4.2.22 through 4.2.25

Description A security flaw exists in Flos Freeware Notepad2. The issue involves an uncontrolled search path within an unknown function in the Msimg32.dll library. Local access is required for exploitation, and the exploitability is considered difficult.

Recommendations Update Flos Freeware Notepad2 to a version newer than 4.2.25.

Correção

Untrusted Search Path

Uncontrolled Search Path Element

Enumeração de Fraquezas

CWE-426

CWE-427

Identificadores relacionados

CVE-2026-2538

Produtos afetados

Msimg32.Dll

Notepad2

Referências · 11

• https://vuldb.com/?submit.749345 · Nota
• https://twitter.com/VulmonFeeds/status/2023308753353822607 · Publicação no Twitter
• https://t.me/cveNotify/152089 · Publicação no Telegram
• https://twitter.com/cracbot/status/2025163633236607062 · Publicação no Twitter
• https://github.com/Cyber-Wo0dy/report/blob/main/notepad2/4.2.25/notepad2_dll_hijacking.md · Nota
• https://twitter.com/CVEnew/status/2023302241537454227 · Publicação no Twitter
• https://vuldb.com/?id.346126 · Nota
• https://twitter.com/cracbot/status/2024801265692405818 · Publicação no Twitter
• https://t.me/CVEtracker/44794 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2026-2538 · Nota de Segurança
• https://vuldb.com/?ctiid.346126 · Nota