Skip to main content

Threat Intelligence Database

Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.

Pro Console Lifetime

Stop chasing alerts. Route them.

Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.

Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)

View Plans & Pricing

API access activates after upgrading in Console -> Billing.

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now

Filter Threats

Narrow down the results by type, severity, or affected countries

Search threats by title, CVE ID, or description. Maximum 100 characters.
Active filters (1):Package: pkg:github/flosfreeware/Notepad2

Threat Intelligence

Click on any threat for detailed analysis and mitigation recommendations

CVE-2026-4546 is a high-severity vulnerability in Flos Freeware Notepad2 version 4.2.25 involving an uncontrolled search path in the TextShaping.dll library. This flaw allows a local attacker with limited privileges to manipulate the search path used by the application, potentially leading to the loading of malicious code. Exploitation is complex and requires local access, with no user interaction needed. The vulnerability impacts confidentiality, integrity, and availability due to high impact on these security properties. No patches or vendor responses are currently available, and no known exploits exist in the wild. Organizations using this specific version of Notepad2 should prioritize mitigation to prevent local privilege escalation or code execution risks.

Join the discussion

A security flaw has been discovered in Flos Freeware Notepad2 4.2.25. This affects an unknown function in the library PROPSYS.dll. Performing a manipulation results in uncontrolled search path. The attack is only possible with local access. The attack is considered to have high complexity. The exploitability is reported as difficult. The vendor was contacted early about this disclosure but did not respond in any way.

Join the discussion

Showing 1 to 2 of 2 results

Filters:Package: pkg:github/flosfreeware/Notepad2
Page 1 of 1
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses