Threats tagged 'ghsa-vfqp-r766-g759'

Notepad++ version 8.9.3 contains a format string injection vulnerability in the Find Results panel handler. This flaw can be exploited by attackers who craft a malicious nativeLang.xml language pack file, which when used triggers format string interpretation during search operations. The vulnerability can lead to denial of service through access violations and potential information disclosure of stack or register contents.