rizonesoft Notepad3 up to 6.25.822.1 src/Notepad3.c uncontrolled search path

Summaryinfo

A vulnerability identified as problematic has been detected in rizonesoft Notepad3 up to 6.25.822.1. Affected by this vulnerability is an unknown functionality in the library MSFTEDIT.DLL of the file src/Notepad3.c. Performing a manipulation results in uncontrolled search path. This vulnerability is known as CVE-2026-38972. Attacking locally is a requirement. No exploit is available. To fix this issue, it is recommended to deploy a patch.

Detailsinfo

A vulnerability was found in rizonesoft Notepad3 up to 6.25.822.1. It has been classified as critical. This affects some unknown functionality in the library MSFTEDIT.DLL of the file src/Notepad3.c. The manipulation with an unknown input leads to a uncontrolled search path vulnerability. CWE is classifying the issue as CWE-427. The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

Notepad3 through 6.25.822.1 contains a DLL search-order hijacking vulnerability in the About-dialog code path in src/Notepad3.c. The application calls LoadLibrary(L"MSFTEDIT.DLL") with a bare DLL name, which allows a local attacker to place a malicious MSFTEDIT.DLL in the application directory or another preferred DLL search location and achieve arbitrary code execution in the context of the user when the About dialog is opened.

It is possible to read the advisory at github.com. This vulnerability is uniquely identified as CVE-2026-38972 since 04/06/2026. The exploitability is told to be difficult. Attacking locally is a requirement. Technical details of the vulnerability are known, but there is no available exploit. The attack technique deployed by this issue is T1574 according to MITRE ATT&CK.

Applying a patch is able to eliminate this problem. The bugfix is ready for download at github.com.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Vendor

• rizonesoft

Name

• Notepad3

Version

• 6.25.822.0
• 6.25.822.1

Website

• Product: https://github.com/rizonesoft/Notepad3/

CPE 2.3info

• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion