Summary
Ein Angreifer kann mehrere Schwachstellen in Notepad++ ausnutzen, um einen Denial of Service Angriff durchzuführen, und um beliebigen Programmcode auszuführen.
Product
Notepad++ ist ein Open-Source-Editor, der viele Programmiersprachen unter Microsoft Windows unterstützt.
Vulnerabilities 2
-
High 7.8CVE-2026-48778 Public exploit
Notepad++: Arbitrary Code Execution via config.xml commandLineInterpreter
Notepad++ is a free and open-source source code editor. Prior to 8.9.6.1, the <GUIConfig name="commandLineInterpreter"> tag in config.xml is read by NppXml::value() (Parameters.cpp:6430) and stored in _nppGUI._commandLineInterpreter without any validation, wh…
-
Medium 5.0CVE-2026-48770 Public exploit
Notepad++ WM_COPYDATA COPYDATA_FULL_CMDLINE local DoS crash
Notepad++ is a free and open-source source code editor. Prior to 8.9.6.1, a local process in the same interactive Windows session can send a malformed WM_COPYDATA message to Notepad++ using the COPYDATA_FULL_CMDLINE path. The handler appears to process COPYDA…
Revision history
-
#2
Referenz(en) aufgenommen: EUVD-2026-39907, EUVD-2026-39908
-
#1
Initiale Fassung
References
-
Notepad++ v8.9.6.1 release vom 2026-05-26
https://notepad-plus-plus.org/news/v8961-released/
-
GitHub Security Advisory GHSA-R39G-3MCW-XCG2 vom 2026-05-26
https://github.com/notepad-plus-plus/notepad-plus-plus/security/advisories/GHSA-r39g-3mcw-xcg2
-
GitHub Security Advisory GHSA-7HM3-WP5Q-CCV9 vom 2026-05-26
https://github.com/notepad-plus-plus/notepad-plus-plus/security/advisories/GHSA-7hm3-wp5q-ccv9