https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 12:57:31 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-341817 EUVD-2026-341817 https://cve.radiocsirt.org/vuln/euvd-2026-341817 https://cve.radiocsirt.org/vuln/fkie_cve-2026-6539 <p>Notepad++ 8.9.3 contains a format string injection vulnerability in the Find Results panel handler that allows attackers to cause denial of service and information disclosure by crafting a malicious nativeLang.xml language pack file. Attackers can distribute a poisoned language pack through community channels that triggers format string interpretation when a user performs search operations, leading to access violations and potential leakage of stack or register contents.</p> <p>Notepad++ 8.9.3 contains a format string injection vulnerability in the Find Results panel handler that allows attackers to cause denial of service and information disclosure by crafting a malicious nativeLang.xml language pack file. Attackers can distribute a poisoned language pack through community channels that triggers format string interpretation when a user performs search operations, leading to access violations and potential leakage of stack or register contents.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-6539 https://cve.radiocsirt.org/vuln/ghsa-vfqp-r766-g759 <p>Notepad++ 8.9.3 contains a format string injection vulnerability in the Find Results panel handler that allows attackers to cause denial of service and information disclosure by crafting a malicious nativeLang.xml language pack file. Attackers can distribute a poisoned language pack through community channels that triggers format string interpretation when a user performs search operations, leading to access violations and potential leakage of stack or register contents.</p> <p>Notepad++ 8.9.3 contains a format string injection vulnerability in the Find Results panel handler that allows attackers to cause denial of service and information disclosure by crafting a malicious nativeLang.xml language pack file. Attackers can distribute a poisoned language pack through community channels that triggers format string interpretation when a user performs search operations, leading to access violations and potential leakage of stack or register contents.</p> https://cve.radiocsirt.org/vuln/ghsa-vfqp-r766-g759 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1282 <p>Ein lokaler Angreifer kann mehrere Schwachstellen in Notepad++ ausnutzen, um einen Denial of Service Angriff durchzuführen, und um Informationen offenzulegen.</p> <p>Ein lokaler Angreifer kann mehrere Schwachstellen in Notepad++ ausnutzen, um einen Denial of Service Angriff durchzuführen, und um Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1282