String Injection Vulnerability in Notepad++ by Notepad++
CVE-2026-3008
10CRITICAL
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2026-3008?
A string injection vulnerability has been identified in Notepad++, allowing attackers to manipulate input strings. Successful exploitation of this vulnerability can lead to potential memory address leaks or even application crashes, impacting user experience and data integrity. Users should ensure they are using an updated version to mitigate any risks associated with this flaw.
Affected Version(s)
Notepad++ 8.9.3
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.