Summary
Ein lokaler Angreifer kann mehrere Schwachstellen in Notepad++ ausnutzen, um seine Privilegien zu erhöhen oder um einen unspezifischen Angriff durchzuführen.
Product
Notepad++ ist ein Open-Source-Editor, der viele Programmiersprachen unter Microsoft Windows unterstützt.
Vulnerabilities 2
-
Medium 5.3CVE-2023-6401 Public exploit
NotePad++ dbghelp.exe uncontrolled search path
A vulnerability classified as problematic was found in NotePad++ up to 8.1. Affected by this vulnerability is an unknown functionality of the file dbghelp.exe. The manipulation leads to uncontrolled search path. An attack has to be approached locally. The ide…
-
Unscored —
An Untrusted search path vulnerability in notepad++ 6.5 allows local users to gain escalated privileges through the msi…
Revision history
-
#1
Initiale Fassung
References
-
GitHub Advisory Database vom 2023-11-30
https://github.com/advisories/GHSA-v5gj-gr4g-9rmq
-
NIST Vulnerability Database vom 2023-11-30
https://nvd.nist.gov/vuln/detail/CVE-2023-6401
-
NIST Vulnerability Database vom 2023-11-30
https://nvd.nist.gov/vuln/detail/CVE-2023-47452