Unrated severityNVD Advisory· Published Mar 24, 2026· Updated Mar 24, 2026
Notepad3 Bundled Oniguruma compile_string_node() Heap Buffer Overflow via Crafted Regex Pattern Allows Arbitrary Code Execution
CVE-2026-4744
Description
Out-of-bounds Read vulnerability in rizonesoft Notepad3 (scintilla/oniguruma/src modules). This vulnerability is associated with program files regcomp.C.
This issue affects Notepad3: before 6.25.714.1.
Affected products
1- rizonesoft/Notepad3v5Range: 0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- github.com/rizonesoft/Notepad3/pull/5392mitrepatch
News mentions
0No linked articles in our index yet.