scintilla records
2 published records for vendor scintilla.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.
Recurring classes
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer1
- CWE-787 Out-of-bounds Write1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
2 records| Action | CVE | Vulnerability | Severity | EPSS · Published |
|---|---|---|---|---|
35Monitor | CVE-2007-2666Proof of concept | Stack-based buffer overflow in LexRuby.cxx (SciLexer.dll) in Scintilla 1.73, as used by notepad++ 4.1.1 and earlier, allows user-assisted rescintilla · scintilla · CWE-119 | High7.6 | 15.5%May 14, 2007 |
34Monitor | CVE-2019-16294Proof of concept | SciLexer.dll in Scintilla in Notepad++ (x64) before 7.7 allows remote code execution or denial of service via Unicode characters in a craftescintilla · scintilla · CWE-787 | High7.8 | 9.8%Sep 14, 2019 |
- CVE-2007-266635Monitor
Stack-based buffer overflow in LexRuby.cxx (SciLexer.dll) in Scintilla 1.73, as used by notepad++ 4.1.1 and earlier, allows user-assisted re
HighCVSS 7.6Proof of conceptEPSS 15%scintilla · scintillaMay 14, 2007
- CVE-2019-1629434Monitor
SciLexer.dll in Scintilla in Notepad++ (x64) before 7.7 allows remote code execution or denial of service via Unicode characters in a crafte
HighCVSS 7.8Proof of conceptEPSS 9%scintilla · scintillaSep 14, 2019