CVE-2019-16294

PoC —

CVSS 3.1

7.8 high

EPSS

10%p95

Published

Sep 14, 2019 (Sep 14, 2019)

Modified

Jun 17, 2026

Description

SciLexer.dll in Scintilla in Notepad++ (x64) before 7.7 allows remote code execution or denial of service via Unicode characters in a crafted .ml file.

Vendors: notepad-plus-plus scintilla
Products: notepad\+\+, scintilla
Weakness: CWE-787
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (9.8%)

In the news0 stories

No ingested article mentions this CVE yet.