CVEvulnerability
CVE-2026-3008
6.6 MEDIUM
Official page ↗
- Status
- Awaiting Analysis
- Published
- 2026-04-27
- Last modified
- 2026-06-17
- Assigner
- 5f57b9bf-260d-4433-bf07-b6a79e9bb7d4
- CVSS 3.1 (5f57b9bf-260d-4433-bf07-b6a79e9bb7d4)
- 6.6 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H
- Weaknesses
- CWE-134
Description
Successful exploitation of the
string injection vulnerability could allow an attacker to obtain memory address
information or crash the application.
Related
Weakness · CWE (1)
- CWE-134 Use of Externally-Controlled Format String weakness
References
- https://community.notepad-plus-plus.org/topic/27500/notepad-v8-9-4-release-candidate community.notepad-plus-plus.org
- https://github.com/llgsjsm/cve-2026-3008 github.com
- https://github.com/notepad-plus-plus/notepad-plus-plus/issues/17960 github.com
- https://llgsjsm.github.io/cve-2026-3008/ llgsjsm.github.io
- https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-044/ www.csa.gov.sg
- https://github.com/llgsjsm/cve-2026-3008 github.com