Skip to content
OpenAdvisories

Vendor

notepad-plus-plus

25 known vulnerabilities.

Products

notepad-plus-plus 25
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 5.1
    CVE-2026-52886 Public exploit

    Notepad++: session.xml backupFilePath starts_with Bypass

    Notepad++ is a free and open-source source code editor. Prior to 8.9.7, Notepad++ validates the backupFilePath attribute from session.xml with std::wstring::starts_with against the expected backup directory without path normalization, allowing parent-director…

    notepad-plus-plus notepad-plus-plus
  • Medium 5.0
    CVE-2026-48770 Public exploit

    Notepad++ WM_COPYDATA COPYDATA_FULL_CMDLINE local DoS crash

    Notepad++ is a free and open-source source code editor. Prior to 8.9.6.1, a local process in the same interactive Windows session can send a malformed WM_COPYDATA message to Notepad++ using the COPYDATA_FULL_CMDLINE path. The handler appears to process COPYDA…

    notepad-plus-plus notepad-plus-plus
  • High 7.8
    CVE-2026-48778 Public exploit

    Notepad++: Arbitrary Code Execution via config.xml commandLineInterpreter

    Notepad++ is a free and open-source source code editor. Prior to 8.9.6.1, the <GUIConfig name="commandLineInterpreter"> tag in config.xml is read by NppXml::value() (Parameters.cpp:6430) and stored in _nppGUI._commandLineInterpreter without any validation, wh…

    notepad-plus-plus notepad-plus-plus
  • High 7.5
    CVE-2026-52885 Public exploit

    Notepad++ TOCTOU: HMAC Checks Disk, Executes from Memory

    Notepad++ is a free and open-source source code editor. Prior to 8.9.6.4, NppCommands.cpp checks the HMAC of the on-disk shortcuts.xml at the moment a user command fires (Time-of-Check). However, the command payload is taken from the in-memory _userCommands v…

    notepad-plus-plus notepad-plus-plus
  • High 7.8
    CVE-2026-48800 Public exploit

    Notepad++: Arbitrary Code Execution via shortcuts.xml UserCommand Injection

    Notepad++ is a free and open-source source code editor. Prior to 8.9.6.1, the <Command> tag text content inside <UserDefinedCommands> in shortcuts.xml is read by NppXml::value(aNode) (Parameters.cpp:3658) in the feedUserCmds() function and stored in UserComma…

    notepad-plus-plus notepad-plus-plus
  • High 7.7
    CVE-2025-15556 Exploited Public exploit

    Notepad++ < 8.8.9 WinGUp Updater Lacks Update Integrity Verification

    Notepad++ versions prior to 8.8.9, when using the WinGUp updater, contain an update integrity verification vulnerability where downloaded update metadata and installers are not cryptographically verified. An attacker able to intercept or redirect update traff…

    notepad-plus-plus notepad-plus-plus
    KEV Feb 12, 2026
  • High 7.3
    CVE-2025-49144 Public exploit

    Notepad++ Privilege Escalation in Installer via Uncontrolled Executable Search Path

    Notepad++ is a free and open-source source code editor. In versions 8.8.1 and prior, a privilege escalation vulnerability exists in the Notepad++ v8.8.1 installer that allows unprivileged users to gain SYSTEM-level privileges through insecure executable searc…

    notepad-plus-plus notepad-plus-plus
  • High 7.8
    CVE-2023-40031 Public exploit

    Notepad++ vulnerable to heap buffer write overflow in Utf8_16_Read::convert

    Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to heap buffer write overflow in `Utf8_16_Read::convert`. This issue may lead to arbitrary code execution. As of time of publication, no known patches are availabl…

    notepad-plus-plus notepad-plus-plus