CVE-2026-3008

CVE

Threat entity extracted from intelligence sources

Frequency

5

occurrences

First Seen

April 27, 2026

Last Seen

April 28, 2026

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Vulnerability in Notepad++ Allows DoS and Memory Disclosure75.2

A format string injection vulnerability, tracked as CVE-2026-3008, has been identified in Notepad++ version 8.9.3. This flaw enables attackers to crash the application or leak sensitive memory information through a malicious language pack. The vulnerability affects users of Notepad++ who load the co...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Critical Vulnerability in Notepad++ Allows DoS and Memory Disclosure

Apr 27·6 sources

Related Articles (5)

Notepad++ Releases 8.9.4 Patch to Fix String Injection Vulnerability (CVE-2026-3008) in 8.9.3

Thecyberexpress·Apr 28

Notepad++ Vulnerability Lets Attackers Crash App and Expose Memory Data

Gbhackers·Apr 28

Notepad++ Vulnerability Allows Attackers to Crash Application, Leak Memory Data

Cybersecuritynews·Apr 27

Cve 2026 3008

llgsjsm.github.io·Apr 27

Vulnerability in Notepad++

Related Entities

Zero-day Exploit Data Breach DDoS CWE-94 - Code Injection Cwe-134 - Use Of Externally-Controlled Format String GitHub Lexilla Scintilla Format String Injection Vulnerability