Skip to content
OpenAdvisories
High WID-SEC-2026-2968 6 CVEs

Notepad++: Mehrere Schwachstellen

Published Aug 23, 2026 · Updated Sep 22, 2026 · Revision 2 · de-DE

Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Notepad++ ausnutzen, um Sicherheitsmaßnahmen zu umgehen, Windows-Authentifizierungsdaten offenzulegen, Dateien zu löschen oder zu manipulieren, beliebigen Code auszuführen oder Denial-of-Service-Zustände herbeizuführen.

Product

Notepad++ ist ein Open-Source-Editor, der viele Programmiersprachen unter Microsoft Windows unterstützt.

Vulnerabilities 6

  • High 8.6
    CVE-2026-85279

    Notepad++: Stack Buffer Overflow in Plugin Lexer Loading via Unchecked GetLexerCount() Return Value

    Notepad++ is a free and open-source source code editor. Prior to 8.9.8, Notepad++ contains a stack buffer overflow in PluginsManager::loadPluginFromPath in PowerEditor/src/MISC/PluginsManager/PluginsManager.cpp because the plugin-supplied GetLexerCount() resu…

    notepad-plus-plus notepad-plus-plus
  • High 7.8
    CVE-2026-77605

    Notepad++ “Run by system” executes *.txt.cmd when user selected *.txt (target confusion → command execution)

    Notepad++ is a free and open-source source code editor. Prior to 8.9.8, the Folder as Workspace Run by system action in Notepad++ can resolve a different sibling file than the file selected by the user. When an attacker places a command script whose name is t…

    notepad-plus-plus notepad-plus-plus
  • High 7.8
    CVE-2026-86054

    Notepad++: Stack Buffer Overflow in `NppParameters::writeSession` via overlong session path

    Notepad++ is a free and open-source source code editor. Prior to 8.9.8, Notepad++ contains a stack buffer overflow in NppParameters::writeSession in PowerEditor/src/Parameters.cpp because it copies a session path derived from -settingsDir= into backupPathName…

    notepad-plus-plus notepad-plus-plus
  • High 7.3
    CVE-2026-85995

    Notepad++: Authenticode verification bypass allows modified updater execution

    Notepad++ is a free and open-source source code editor. From 8.9.7 until 8.9.8, the Notepad++ updater and signature verification path can accept a modified GUP.exe file whose embedded certificate metadata remains present even though its Authenticode digest is…

    notepad-plus-plus notepad-plus-plus
  • Medium 6.7
    CVE-2026-85288

    Notepad++: Shortcuts.xml macro HMAC bypass still reachable via the "Run a Macro Multiple Times" dialog

    Notepad++ is a free and open-source source code editor. Prior to 8.9.8, Notepad++ incompletely enforces shortcuts.xml HMAC validation because WM_MACRODLGRUNMACRO, the Run a Macro Multiple Times entry point, calls macroPlayback() without the validation used by…

    notepad-plus-plus notepad-plus-plus
  • Medium 5.5
    CVE-2026-86056

    Notepad++: Null pointer dereference in NPPM_SAVESESSION message handler causes crash (DoS)

    Notepad++ is a free and open-source source code editor. Prior to 8.9.8, the NPPM_SAVESESSION handler in PowerEditor/src/NppBigSwitch.cpp converts lParam to a sessionInfo pointer and dereferences its nbFile, files, and sessionFilePathName members without check…

    notepad-plus-plus notepad-plus-plus

Revision history

  1. #2

    Referenz(en) aufgenommen: CVE-2026-77605, EUVD-2026-84573, CVE-2026-85995, EUVD-2026-84575, CVE-2026-86056, EUVD-2026-84574, CVE-2026-86054, EUVD-2026-84572, CVE-2026-85288, EUVD-2026-84571, CVE-2026-85279, EUVD-2026-84570

  2. #1

    Initiale Fassung

References