notepad-plus-plus

Top products

The 15 most recently published vulnerabilities affecting notepad-plus-plus.

• CVE-2026-48770Notepad++ WM_COPYDATA COPYDATA_FULL_CMDLINE local DoS crash5.0Jun 26, 2026
• CVE-2026-48778Notepad++: Arbitrary Code Execution via config.xml commandLineInterpreter7.8Jun 26, 2026
• CVE-2026-52885Notepad++ TOCTOU: HMAC Checks Disk, Executes from Memory6.3Jun 26, 2026
• CVE-2026-46710Notepad++: Privilege Escalation in the Installer via Uncontrolled Executable Search Path7.8Jun 26, 2026
• CVE-2026-48800Notepad++: Arbitrary Code Execution via shortcuts.xml UserCommand Injection7.8Jun 26, 2026
• CVE-2026-52884Notepad++: CVE-2026-48800 Bypass7.8Jun 26, 2026
• CVE-2026-6539Notepad++ 8.9.3 Format String Injection via nativeLang.xml4.4Apr 30, 2026
• CVE-2026-5525Stack-Based Buffer Overflow in Notepad++ File Drop Handler leads to DoS6.0Apr 10, 2026
• CVE-2026-25926Notepad++ has an Untrusted Search Path7.3Feb 18, 2026
• CVE-2025-15556Notepad++ < 8.8.9 WinGUp Updater Lacks Update Integrity VerificationKEV7.5Feb 3, 2026
• CVE-2025-49144Notepad++ Privilege Escalation in Installer via Uncontrolled Executable Search Path7.3Jun 23, 2025
• CVE-2023-6401NotePad++ dbghelp.exe uncontrolled search path5.3Nov 30, 2023
• CVE-2023-47452An Untrusted search path vulnerability in notepad++ 6.5 allows local users to gain escalated privileges through the msimg32.dll file in the current working directory.7.8Nov 30, 2023
• CVE-2023-40166Notepad++ heap buffer read overflow in FileManager::detectLanguageFromTextBegining 5.5Aug 25, 2023
• CVE-2023-40164Notepad++ global buffer read overflow in nsCodingStateMachine::NextState5.5Aug 25, 2023