TI-2026-58859 CVE-2026-85995
Notepad++: Authenticode verification bypass allows modified updater execution
Priority LOW 33
Notepad++ is a free and open-source source code editor.
Vulnerabilities
32 records
TI-2026-58870 CVE-2026-86056
Notepad++: Null pointer dereference in NPPM_SAVESESSION message handler causes crash (DoS)
Priority MEDIUM 58
Notepad++ is a free and open-source source code editor.
TI-2026-54091 CVE-2026-77605
Notepad++ “Run by system” executes *.txt.cmd when user selected *.txt (target confusion → command execution)
Priority HIGH 69
Notepad++ is a free and open-source source code editor.
TI-2026-58869 CVE-2026-86054
Notepad++: Stack Buffer Overflow in `NppParameters::writeSession` via overlong session path
Priority HIGH 69
Notepad++ is a free and open-source source code editor.
TI-2026-58567 CVE-2026-85288
Notepad++: Shortcuts.xml macro HMAC bypass still reachable via the "Run a Macro Multiple Times" dialog
Priority HIGH 65
Notepad++ is a free and open-source source code editor.
TI-2026-58566 CVE-2026-85279
Notepad++: Stack Buffer Overflow in Plugin Lexer Loading via Unchecked GetLexerCount() Return Value
Priority HIGH 72
Notepad++ is a free and open-source source code editor.
Priority HIGH 68
Notepad++ is a free and open-source source code editor.
Priority MEDIUM 62
Notepad++ is a free and open-source source code editor.
TI-2026-50183 CVE-2026-71858
Notepad++: shortcuts.xml Macro HMAC Bypass Enables Conditional Elevated Command Execution
Priority MEDIUM 60
Notepad++ is a free and open-source source code editor.
Priority LOW 35
Notepad++ is a free and open-source source code editor.
TI-2026-51387 CVE-2026-73250
Notepad++: Install-time PowerShell command injection through installation path
Priority LOW 26
Notepad++ is a free and open-source source code editor.
Priority MEDIUM 56
Notepad++ is a free and open-source source code editor.
TI-2026-36048 CVE-2026-48778
Notepad++: Arbitrary Code Execution via config.xml commandLineInterpreter
Priority HIGH 69
Notepad++ is a free and open-source source code editor.
Priority HIGH 68
Notepad++ is a free and open-source source code editor.
TI-2026-34335 CVE-2026-46710
Notepad++: Privilege Escalation in the Installer via Uncontrolled Executable Search Path
Priority LOW 34
Notepad++ is a free and open-source source code editor.
TI-2026-36070 CVE-2026-48800
Notepad++: Arbitrary Code Execution via shortcuts.xml UserCommand Injection
Priority HIGH 69
Notepad++ is a free and open-source source code editor.
TI-2026-37980 CVE-2026-52884
Notepad++: CVE-2026-48800 Bypass
Priority LOW 35
Notepad++ is a free and open-source source code editor.
TI-2026-05734 CVE-2026-6539 · GHSA-vfqp-r766-g759
Notepad++ 8.9.3 Format String Injection via nativeLang.xml
Priority LOW 20
Notepad++ 8.9.3 contains a format string injection vulnerability in the Find Results panel handler that allows attackers to cause denial of service and information disclosure by crafting a malicious nativeLang.xml langua…
TI-2026-04836 CVE-2026-5525 · GHSA-8hrp-2fqv-gvrx
Stack-Based Buffer Overflow in Notepad++ File Drop Handler leads to DoS
Priority HIGH 69
A stack-based buffer overflow vulnerability exists in Notepad++ version 8.9.3 in the file drop handler component.
TI-2026-20956 CVE-2026-25926
Notepad++ has an Untrusted Search Path
Priority LOW 34
Notepad++ is a free and open-source source code editor.
TI-2025-14195 CVE-2025-15556 · GHSA-cqx4-h5ph-3xj9
Notepad++ < 8.8.9 WinGUp Updater Lacks Update Integrity Verification
Priority CRITICAL 93KEV
Notepad++ versions prior to 8.8.9, when using the WinGUp updater, contain an update integrity verification vulnerability where downloaded update metadata and installers are not cryptographically verified.
TI-2025-31224 CVE-2025-49144
Notepad++ Privilege Escalation in Installer via Uncontrolled Executable Search Path
Priority LOW 35
Notepad++ is a free and open-source source code editor.
TI-2023-05875 CVE-2023-6401 · GHSA-w9qm-5wjh-3m5x
NotePad++ dbghelp.exe uncontrolled search path
Priority LOW 34
A vulnerability classified as problematic was found in NotePad++ up to 8.1.
TI-2023-25654 CVE-2023-47452 · GHSA-v5gj-gr4g-9rmq
An Untrusted search path vulnerability in notepad++ 6.5 allows local users to gain…
Priority LOW 35
An Untrusted search path vulnerability in notepad++ 6.5 allows local users to gain escalated privileges through the msimg32.dll file in the current working directory.
TI-2023-21040 CVE-2023-40166
Notepad++ heap buffer read overflow in FileManager::detectLanguageFromTextBegining
Priority MEDIUM 58
Notepad++ is a free and open-source source code editor.