medium6.6
CVE-2026-3008
Successful exploitation of the string injection vulnerability could allow an attacker to obtain memory address information or crash the application.
Impact
Successful exploitation of the string injection vulnerability could allow an attacker to obtain memory address information or crash the application.
Affected packages
This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.
Weakness classification
References
- NVD record
- CVE.org record
- https://community.notepad-plus-plus.org/topic/27500/notepad-v8-9-4-release-candidate
- https://github.com/llgsjsm/cve-2026-3008
- https://github.com/notepad-plus-plus/notepad-plus-plus/issues/17960
- https://llgsjsm.github.io/cve-2026-3008/
- https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-044/
- https://github.com/llgsjsm/cve-2026-3008