CVE-2019-16294

SciLexer.dll in Scintilla in Notepad++ (x64) before 7.7 allows remote code execution or denial of service via Unicode characters in a crafted .ml file.

Affected products

Notepad++

Notepad-plus-plus Notepad\+\+

< 7.7

Fix

Available

CVSS 3.1

7.8 HIGH

EPSS

9.8% (95th percentile)

Weakness

CWE-787

NVD status

Modified

Published

2019-09-14