Priority MEDIUM 56
Notepad++ is a free and open-source source code editor.
Vulnerabilities
20 records
TI-2026-36048 CVE-2026-48778
Notepad++: Arbitrary Code Execution via config.xml commandLineInterpreter
Priority HIGH 69
Notepad++ is a free and open-source source code editor.
Priority HIGH 68
Notepad++ is a free and open-source source code editor.
TI-2026-34335 CVE-2026-46710
Notepad++: Privilege Escalation in the Installer via Uncontrolled Executable Search Path
Priority LOW 34
Notepad++ is a free and open-source source code editor.
TI-2026-36070 CVE-2026-48800
Notepad++: Arbitrary Code Execution via shortcuts.xml UserCommand Injection
Priority HIGH 69
Notepad++ is a free and open-source source code editor.
TI-2026-37980 CVE-2026-52884
Notepad++: CVE-2026-48800 Bypass
Priority LOW 35
Notepad++ is a free and open-source source code editor.
TI-2026-05734 CVE-2026-6539 · GHSA-vfqp-r766-g759
Notepad++ 8.9.3 Format String Injection via nativeLang.xml
Priority LOW 20
Notepad++ 8.9.3 contains a format string injection vulnerability in the Find Results panel handler that allows attackers to cause denial of service and information disclosure by crafting a malicious nativeLang.xml langua…
TI-2026-04836 CVE-2026-5525 · GHSA-8hrp-2fqv-gvrx
Stack-Based Buffer Overflow in Notepad++ File Drop Handler leads to DoS
Priority HIGH 69
A stack-based buffer overflow vulnerability exists in Notepad++ version 8.9.3 in the file drop handler component.
TI-2026-20956 CVE-2026-25926
Notepad++ has an Untrusted Search Path
Priority LOW 34
Notepad++ is a free and open-source source code editor.
TI-2025-14195 CVE-2025-15556 · GHSA-cqx4-h5ph-3xj9
Notepad++ < 8.8.9 WinGUp Updater Lacks Update Integrity Verification
Priority CRITICAL 93KEV
Notepad++ versions prior to 8.8.9, when using the WinGUp updater, contain an update integrity verification vulnerability where downloaded update metadata and installers are not cryptographically verified.
TI-2023-05875 CVE-2023-6401 · GHSA-w9qm-5wjh-3m5x
NotePad++ dbghelp.exe uncontrolled search path
Priority LOW 34
A vulnerability classified as problematic was found in NotePad++ up to 8.1.
TI-2023-25654 CVE-2023-47452 · GHSA-v5gj-gr4g-9rmq
An Untrusted search path vulnerability in notepad++ 6.5 allows local users to gain…
Priority LOW 35
An Untrusted search path vulnerability in notepad++ 6.5 allows local users to gain escalated privileges through the msimg32.dll file in the current working directory.
TI-2023-21040 CVE-2023-40166
Notepad++ heap buffer read overflow in FileManager::detectLanguageFromTextBegining
Priority MEDIUM 58
Notepad++ is a free and open-source source code editor.
TI-2023-21038 CVE-2023-40164
Notepad++ global buffer read overflow in nsCodingStateMachine::NextState
Priority MEDIUM 58
Notepad++ is a free and open-source source code editor.
TI-2023-20926 CVE-2023-40036
Notepad++ global buffer read overflow in CharDistributionAnalysis::HandleOneChar
Priority LOW 25
Notepad++ is a free and open-source source code editor.
TI-2023-20921 CVE-2023-40031
Notepad++ vulnerable to heap buffer write overflow in Utf8_16_Read::convert
Priority HIGH 69
Notepad++ is a free and open-source source code editor.
TI-2022-13733 CVE-2022-31902 · GHSA-893r-9r35-x6c2
Notepad++ v8.4.1 was discovered to contain a stack overflow via the component Finder::add().
Priority MEDIUM 58
Notepad++ v8.4.1 was discovered to contain a stack overflow via the component Finder::add().
TI-2022-13732 CVE-2022-31901 · GHSA-v6qv-5wc9-pq33
Buffer overflow in function Notepad_plus::addHotSpot in Notepad++ v8.4.3 and earlier…
Priority MEDIUM 62
Buffer overflow in function Notepad_plus::addHotSpot in Notepad++ v8.4.3 and earlier allows attackers to crash the application via two crafted files.
TI-2022-13894 CVE-2022-32168 · GHSA-32p8-qq6w-3v8c
notepad-plus-plus - DLL Hijacking
Priority LOW 37
Notepad++ versions 8.4.1 and before are vulnerable to DLL hijacking where an attacker can replace the vulnerable dll (UxTheme.dll) with his own dll and run arbitrary code in the context of Notepad++.
TI-2019-12265 CVE-2019-16294 · GHSA-75x3-f928-c337
SciLexer.dll in Scintilla in Notepad++ (x64) before 7.7 allows remote code execution or…
Priority MEDIUM 46
SciLexer.dll in Scintilla in Notepad++ (x64) before 7.7 allows remote code execution or denial of service via Unicode characters in a crafted .ml file.