Flos-freeware CVEs and Security Vulnerabilities

CVE-2026-4546

Flos Freeware Notepad2 TextShaping.dll uncontrolled search path

A weakness has been identified in Flos Freeware Notepad2 4.2.25. This impacts an unknown function in the library TextShaping.dll. Executing a manipulation can lead to uncontrolled search path. The attack is restricted to local execution. The attack requires a high level of complexity. The exploitability is said to be difficult. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS 4.0 · 7.3 High EPSS < 1% KEV · Not listed

Vendors

Flos-freeware Flos Freeware

Products

Notepad2 Notepad2

CVE-2026-4545

Flos Freeware Notepad2 PROPSYS.dll uncontrolled search path

A security flaw has been discovered in Flos Freeware Notepad2 4.2.25. This affects an unknown function in the library PROPSYS.dll. Performing a manipulation results in uncontrolled search path. The attack is only possible with local access. The attack is considered to have high complexity. The exploitability is reported as difficult. The vendor was contacted early about this disclosure but did not respond in any way.