Skip to content
OpenAdvisories

Vendor

notepad-plus-plus

25 known vulnerabilities.

Products

notepad-plus-plus 25
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.1
    CVE-2026-52886 Public exploit

    Notepad++: session.xml backupFilePath starts_with Bypass

    Notepad++ is a free and open-source source code editor. Prior to 8.9.7, Notepad++ validates the backupFilePath attribute from session.xml with std::wstring::starts_with against the expected backup directory without path normalization, allowing parent-director…

    notepad-plus-plus notepad-plus-plus
  • Medium 5.0
    CVE-2026-48770 Public exploit

    Notepad++ WM_COPYDATA COPYDATA_FULL_CMDLINE local DoS crash

    Notepad++ is a free and open-source source code editor. Prior to 8.9.6.1, a local process in the same interactive Windows session can send a malformed WM_COPYDATA message to Notepad++ using the COPYDATA_FULL_CMDLINE path. The handler appears to process COPYDA…

    notepad-plus-plus notepad-plus-plus