A weakness has been identified in Flos Freeware Notepad2 4.2.25.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Mar 22, 2026 · NIST NVD

   Detected

   A weakness has been identified in Flos Freeware Notepad2 4.2.25. This impacts an unknown function in the library TextShaping.dll. Executing a manipulation can lead to uncontrolled search path. The attack is restricted to local execution. The attack requires a high level of complexity. The exploitability is said to be difficult. The vendor was contacted early about this disclosure but did not respo

2. Jun 17, 2026 · NIST NVD

   Updated

   A weakness has been identified in Flos Freeware Notepad2 4.2.25. This impacts an unknown function in the library TextShaping.dll. Executing a manipulation can lead to uncontrolled search path. The attack is restricted to local execution. The attack requires a high level of complexity. The exploitability is said to be difficult. The vendor was contacted early about this disclosure but did not respo

Affected

• cpe flos-freeware/notepad24.2.25

Sources

• CVE.orgVulnerability recordCVE-2026-4546

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-4546

  A weakness has been identified in Flos Freeware Notepad2 4.2.25. This impacts an unknown function in the library TextShaping.dll. Executing a manipulation can lead to uncontrolled search path. The attack is restricted to local execution. The attack requires a high level of comple

  nvd.nist.gov

References

• Permissions Required · drive.google.com
• Permissions Required · vuldb.com
• Third Party Advisory · vuldb.com
• Exploit · vuldb.com