{
  "cveId": "CVE-2026-85279",
  "url": "https://patchblox.com/security/cve/CVE-2026-85279",
  "summary": "CVE-2026-85279 is fixed in Notepad\u002B\u002B on 1 platform by Notepad\u002B\u002B 8.9.6.1 (version 8.9.6.1), released May 26, 2026. It is not reported as exploited. Patch Radar priority: High.",
  "title": "Notepad\u002B\u002B: Stack Buffer Overflow in Plugin Lexer Loading via Unchecked GetLexerCount() Return Value",
  "description": "Notepad\u002B\u002B is a free and open-source source code editor. Prior to 8.9.8, Notepad\u002B\u002B contains a stack buffer overflow in PluginsManager::loadPluginFromPath in PowerEditor/src/MISC/PluginsManager/PluginsManager.cpp because the plugin-supplied GetLexerCount() result controls a loop that writes to containers[30] without enforcing NB_MAX_EXTERNAL_LANG. A malicious or compromised plugin that reports more than 30 lexers can write beyond the stack array and corrupt control data, which can permit arbitrary code execution in the Notepad\u002B\u002B process context. This issue is fixed in version 8.9.8.",
  "published": "2026-09-22T18:17:23Z",
  "severity": "",
  "cvss": 8.6,
  "cwe": "CWE-121: Stack-based Buffer Overflow",
  "epss": 0.00224,
  "epssPercentile": 0.13067,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://nvd.nist.gov/vuln/detail/CVE-2026-85279",
  "fixes": [
    {
      "platform": "windows-app",
      "product": "Notepad\u002B\u002B",
      "fixedVersion": "8.9.6.1",
      "fix": "Notepad\u002B\u002B 8.9.6.1",
      "url": "https://patchblox.com/security/fix/windows-app/notepad-.notepad-8.9.6.1",
      "released": "2026-05-26T00:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T19:12:23Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}