Nnotepad-plus-plus

Products

Exploited and recent CVEs

• CVE-2025-15556 High 7.7 Exploited Notepad++ < 8.8.9 WinGUp Updater Lacks Update Integrity Verification 1.7%
• CVE-2026-85995 High 7.3 Notepad++: Authenticode verification bypass allows modified updater execution 0.1%
• CVE-2026-86056 Medium 5.5 Notepad++: Null pointer dereference in NPPM_SAVESESSION message handler causes crash (DoS) 0.2%
• CVE-2026-77605 High 7.8 Notepad++ “Run by system” executes *.txt.cmd when user selected *.txt (target confusion → command execution) 0.2%
• CVE-2026-86054 High 7.8 Notepad++: Stack Buffer Overflow in `NppParameters::writeSession` via overlong session path 0.2%
• CVE-2026-85288 Medium 6.7 Notepad++: Shortcuts.xml macro HMAC bypass still reachable via the "Run a Macro Multiple Times" dialog 0.1%
• CVE-2026-85279 High 8.6 Notepad++: Stack Buffer Overflow in Plugin Lexer Loading via Unchecked GetLexerCount() Return Value 0.2%
• CVE-2026-57233 High 8.1 Notepad++: Path Traversal (Zip Slip) in WinGup Plugin Extraction 0.5%
• CVE-2026-52886 Medium 5.1 Notepad++: session.xml backupFilePath starts_with Bypass 0.2%
• CVE-2026-71858 Medium 5.4 Notepad++: shortcuts.xml Macro HMAC Bypass Enables Conditional Elevated Command Execution 0.1%
• CVE-2026-54758 High 7.8 Notepad++: Stack Buffer Overflow in expandNppEnvironmentStrs 0.2%
• CVE-2026-73250 Medium 5.4 Notepad++: Install-time PowerShell command injection through installation path 0.2%
• CVE-2026-48770 Medium 5.0 Notepad++ WM_COPYDATA COPYDATA_FULL_CMDLINE local DoS crash 0.1%
• CVE-2026-48778 High 7.8 Notepad++: Arbitrary Code Execution via config.xml commandLineInterpreter 0.6%
• CVE-2026-52885 High 7.5 Notepad++ TOCTOU: HMAC Checks Disk, Executes from Memory 0.1%
• CVE-2026-46710 High 7.5 Notepad++: Privilege Escalation in the Installer via Uncontrolled Executable Search Path 0.2%
• CVE-2026-48800 High 7.8 Notepad++: Arbitrary Code Execution via shortcuts.xml UserCommand Injection 0.2%
• CVE-2026-52884 High 7.8 Notepad++: CVE-2026-48800 Bypass 0.2%
• CVE-2026-25926 High 7.3 Notepad++ has an Untrusted Search Path 0.3%
• CVE-2025-49144 High 7.3 Notepad++ Privilege Escalation in Installer via Uncontrolled Executable Search Path 0.7%
• CVE-2023-40166 Medium 5.5 Notepad++ heap buffer read overflow in FileManager::detectLanguageFromTextBegining 0.4%
• CVE-2023-40164 Medium 5.5 Notepad++ global buffer read overflow in nsCodingStateMachine::NextState 0.5%
• CVE-2023-40036 Medium 5.5 Notepad++ global buffer read overflow in CharDistributionAnalysis::HandleOneChar 0.4%
• CVE-2023-40031 High 7.8 Notepad++ vulnerable to heap buffer write overflow in Utf8_16_Read::convert 0.5%
• CVE-2022-32168 High 7.8 notepad-plus-plus - DLL Hijacking 0.8%