CVE Alert: CVE-2026-2538 - Flos Freeware - Notepad2 - RedPacket Security

A security flaw has been discovered in Flos Freeware Notepad2 4.2.22/4.2.23/4.2.24/4.2.25. Affected is an unknown function in the library Msimg32.dll.

RedPacket Security
🚩 CVE-2026-2538: High-severity vuln in Notepad2 (v4.2.22 – 4.2.25). Uncontrolled search path in Msimg32.dll lets local users execute code or escalate privileges. No patch yet — restrict local access & monitor endpoints. https://radar.offseq.com/threat/cve-2026-2538-uncontrolled-search-path-in-flos-fre-d9540b5b #OffSeq #Vulnerability #Notepad2

i miss my amazing follower count. but i'm too lazy to add them all back so HERE WE ARE.

why are we talking about #notepad2 #texteditors in here? 😂