Notepad-plus-plus Notepad\+\+
21 CVEs affecting Notepad-plus-plus Notepad\+\+. Latest disclosed: 2026-06-26. Critical: 0, High: 11.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-52884 | High | 7.8 | 2026-06-26 | Notepad++ is a free and open-source source code editor. In v8.9.6.1, isInTrustedDirectory() does NOT canonicalize the path before checking. It uses a prefix-ba… |
CVE-2026-48800 | High | 7.8 | 2026-06-26 | Notepad++ is a free and open-source source code editor. Prior to 8.9.6.1, the <Command> tag text content inside <UserDefinedCommands> in shortcuts.xml is read… |
CVE-2026-48778 | High | 7.8 | 2026-06-26 | Notepad++ is a free and open-source source code editor. Prior to 8.9.6.1, the <GUIConfig name="commandLineInterpreter"> tag in config.xml is read by NppXml::va… |
CVE-2026-46710 | High | 7.8 | 2026-06-26 | Notepad++ is a free and open-source source code editor. From 8.9.4 until 8.9.6, Notepad++ contains a local privilege escalation vulnerability in the installer… |
CVE-2023-47452 | High | 7.8 | 2023-11-30 | An Untrusted search path vulnerability in notepad++ 6.5 allows local users to gain escalated privileges through the msimg32.dll file in the current working dir… |
CVE-2023-40031 | High | 7.8 | 2023-08-25 | Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to heap buffer write overflow in `Utf8_16_Read::convert`. This… |
CVE-2022-32168 | High | 7.8 | 2022-09-28 | Notepad++ versions 8.4.1 and before are vulnerable to DLL hijacking where an attacker can replace the vulnerable dll (UxTheme.dll) with his own dll and run arb… |
CVE-2019-16294 | High | 7.8 | 2019-09-14 | SciLexer.dll in Scintilla in Notepad++ (x64) before 7.7 allows remote code execution or denial of service via Unicode characters in a crafted .ml file. |
CVE-2017-8803 | High | 7.8 | 2017-07-05 | Notepad++ 7.3.3 (32-bit) with Hex Editor Plugin v0.9.5 might allow user-assisted attackers to execute code via a crafted file, because of a "Data from Faulting… |
CVE-2025-15556 | High | 7.5 | 2026-02-03 | Notepad++ versions prior to 8.8.9, when using the WinGUp updater, contain an update integrity verification vulnerability where downloaded update metadata and i… |
CVE-2026-25926 | High | 7.3 | 2026-02-19 | Notepad++ is a free and open-source source code editor. An Unsafe Search Path vulnerability (CWE-426) exists in versions prior to 8.9.2 when launching Windows… |
CVE-2022-31901 | Medium | 6.5 | 2023-01-19 | Buffer overflow in function Notepad_plus::addHotSpot in Notepad++ v8.4.3 and earlier allows attackers to crash the application via two crafted files. |
CVE-2026-52885 | Medium | 6.3 | 2026-06-26 | Notepad++ is a free and open-source source code editor. Prior to 8.9.6.4, NppCommands.cpp checks the HMAC of the on-disk shortcuts.xml at the moment a user com… |
CVE-2026-5525 | Medium | 6.0 | 2026-04-10 | A stack-based buffer overflow vulnerability exists in Notepad++ version 8.9.3 in the file drop handler component. When a user drags and drops a directory path… |
CVE-2023-40166 | Medium | 5.5 | 2023-08-25 | Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to heap buffer read overflow in `FileManager::detectLanguageFro… |
CVE-2023-40164 | Medium | 5.5 | 2023-08-25 | Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to global buffer read overflow in `nsCodingStateMachine::NextSt… |
CVE-2023-40036 | Medium | 5.5 | 2023-08-25 | Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to global buffer read overflow in `CharDistributionAnalysis::Ha… |
CVE-2022-31902 | Medium | 5.5 | 2023-02-01 | Notepad++ v8.4.1 was discovered to contain a stack overflow via the component Finder::add(). |
CVE-2023-6401 | Medium | 5.3 | 2023-11-30 | A vulnerability classified as problematic was found in NotePad++ up to 8.1. Affected by this vulnerability is an unknown functionality of the file dbghelp.exe… |
CVE-2026-48770 | Medium | 5.0 | 2026-06-26 | Notepad++ is a free and open-source source code editor. Prior to 8.9.6.1, a local process in the same interactive Windows session can send a malformed WM_COPYD… |