CVE-2026-4545 - Flos Freeware Notepad2 PROPSYS.dll uncontrolled search path

Back Back to CVE browser

HIGH

Flos Freeware Notepad2 PROPSYS.dll uncontrolled search path

Published Mar 22, 2026

7.3

HIGH

CVSS 4.0

EPSS 0.18%

Description

A security flaw has been discovered in Flos Freeware Notepad2 4.2.25. This affects an unknown function in the library PROPSYS.dll. Performing a manipulation results in uncontrolled search path. The attack is only possible with local access. The attack is considered to have high complexity. The exploitability is reported as difficult. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

Vendor Flos Freeware Product Notepad2 Default
n/a
- Version
  4.2.25
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Flos Freeware

Notepad2

n/a

Version	Status	Constraints
4.2.25	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-426

CWE-427

References (5)

https://drive.google.com/file/d/1o3A3x47B2gi645H02-28qgoIgGN-g6rK/view
relatedPermissions Required
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-14299
Advisory
https://vuldb.com/?ctiid.352372
signaturepermissions-requiredPermissions Required
https://vuldb.com/?id.352372
vdb-entryThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.774752
third-party-advisoryThird Party AdvisoryVDB Entry

Link	Providers	Tags
https://drive.google.com/file/d/1o3A3x47B2gi645H02-28qgoIgGN-g6rK/view		relatedPermissions Required
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-14299		Advisory
https://vuldb.com/?ctiid.352372		signaturepermissions-requiredPermissions Required
https://vuldb.com/?id.352372		vdb-entryThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.774752		third-party-advisoryThird Party AdvisoryVDB Entry