PT-2026-27321

CVE-2026-4744

Published

2026-03-24

Updated

2026-03-25

Description by

CVSS 4.0

9.3

Critical

MetricsAV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:U/V:D/RE:L/U:Amber

Name of the Vulnerable Software and Affected Versions Notepad3 versions prior to 6.25.714.1

Description An out-of-bounds read issue exists in the rizonesoft Notepad3 application, specifically within the scintilla, oniguruma, and src modules. The issue is related to the regcomp.C program file. This is a parser vulnerability where malicious regular expressions can lead to remote code execution.

Recommendations Update Notepad3 to version 6.25.714.1 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Titan Team

Vendors

Affected products

Weakness enumeration

CWE-125: Out-of-bounds Read

Related identifiers