Skip to contentNotepad-plus-plus Notepad\+\+ vulnerabilities
- notepad-plus-plus, notepad-plus-plus notepad\+\+ +1 moreNotepad++ WM_COPYDATA COPYDATA_FULL_CMDLINE local DoS crashCVE-2026-48770Public exploit5.0 Medium
- notepad-plus-plus, notepad-plus-plus notepad\+\+ +1 moreNotepad++: Arbitrary Code Execution via config.xml commandLineInterpreterCVE-2026-48778Public exploit7.8 High
- notepad-plus-plus, notepad-plus-plus notepad\+\+ +1 moreNotepad++ TOCTOU: HMAC Checks Disk, Executes from MemoryCVE-2026-52885Public exploit7.5 High
- notepad-plus-plus, notepad-plus-plus notepad\+\+ +1 moreNotepad++: Privilege Escalation in the Installer via Uncontrolled Executable Search PathCVE-2026-467107.5 High
- notepad-plus-plus, notepad-plus-plus notepad\+\+ +1 moreNotepad++: Arbitrary Code Execution via shortcuts.xml UserCommand InjectionCVE-2026-48800Public exploit7.8 High
- notepad-plus-plus, notepad-plus-plus notepad\+\+ +1 moreNotepad++: CVE-2026-48800 BypassCVE-2026-528847.8 High
- notepad++, notepad-plus-plus notepad\+\+ +1 moreNotepad++ 8.9.3 Format String Injection via nativeLang.xmlCVE-2026-65394.6 Medium
- notepad++, notepad-plus-plus notepad\+\+ +1 moreStack-Based Buffer Overflow in Notepad++ File Drop Handler leads to DoSCVE-2026-55256.0 Medium
- notepad-plus-plus, notepad-plus-plus notepad\+\+ +1 moreNotepad++ has an Untrusted Search PathCVE-2026-259267.3 High
- notepad++, notepad-plus-plus, notepad-plus-plus notepad\+\+ +2 moreNotepad++ < 8.8.9 WinGUp Updater Lacks Update Integrity VerificationCVE-2025-15556In KEVPublic exploit7.7 High
- notepad++, notepad-plus-plus notepad\+\+ +1 moreNotePad++ dbghelp.exe uncontrolled search pathCVE-2023-6401Public exploit5.3 Medium
- notepad-plus-plus notepad\+\+An Untrusted search path vulnerability in notepad++ 6.5 allows local users to gain escalated...CVE-2023-474527.8 High
- notepad-plus-plus, notepad-plus-plus notepad\+\+ +1 moreNotepad++ heap buffer read overflow in FileManager::detectLanguageFromTextBeginingCVE-2023-401665.5 Medium
- notepad-plus-plus, notepad-plus-plus notepad\+\+ +1 moreNotepad++ global buffer read overflow in nsCodingStateMachine::NextStateCVE-2023-401645.5 Medium
- notepad-plus-plus, notepad-plus-plus notepad\+\+ +1 moreNotepad++ global buffer read overflow in CharDistributionAnalysis::HandleOneCharCVE-2023-400365.5 Medium
- notepad-plus-plus, notepad-plus-plus notepad\+\+ +1 moreNotepad++ vulnerable to heap buffer write overflow in Utf8_16_Read::convertCVE-2023-40031Public exploit7.8 High
- notepad-plus-plus notepad\+\+Notepad++ v8.4.1 was discovered to contain a stack overflow via the component Finder::add().CVE-2022-31902Public exploit5.5 Medium
- notepad-plus-plus notepad\+\+Buffer overflow in function Notepad_plus::addHotSpot in Notepad++ v8.4.3 and earlier allows...CVE-2022-31901Public exploit6.5 Medium
- notepad-plus-plus, notepad-plus-plus notepad\+\+ +1 morenotepad-plus-plus - DLL HijackingCVE-2022-321687.8 High
- scintilla, notepad-plus-plus notepad\+\+ +1 moreSciLexer.dll in Scintilla in Notepad++ (x64) before 7.7 allows remote code execution or denial of...CVE-2019-16294Public exploit7.8 High