Vulnerability index

Browse CVEs

19 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Notepad\+\+ HIGH 7.8
CVE-2026-48778

Notepad++ is a free and open-source source code editor. Prior to 8.9.6.1, the <GUIConfig name="commandLineInterpreter"> tag in config.xml is read by …

Fix: 8.9.6.1+
Fix from $1,950 2026-06-26
Notepad\+\+ HIGH 7.8
CVE-2026-48800

Notepad++ is a free and open-source source code editor. Prior to 8.9.6.1, the <Command> tag text content inside <UserDefinedCommands> in shortcuts.xm…

Fix: 8.9.6.1+
Fix from $1,950 2026-06-26
Notepad\+\+ HIGH 7.8
CVE-2026-52884

Notepad++ is a free and open-source source code editor. In v8.9.6.1, isInTrustedDirectory() does NOT canonicalize the path before checking. It uses a…

Patch available
Fix from $1,950 2026-06-26
Notepad\+\+ MEDIUM 6.3
CVE-2026-52885

Notepad++ is a free and open-source source code editor. Prior to 8.9.6.4, NppCommands.cpp checks the HMAC of the on-disk shortcuts.xml at the moment …

Fix: 8.9.6.4+
Fix from $1,600 2026-06-26
Notepad\+\+ MEDIUM 5.0
CVE-2026-48770

Notepad++ is a free and open-source source code editor. Prior to 8.9.6.1, a local process in the same interactive Windows session can send a malforme…

Fix: 8.9.6.1+
Fix from $1,600 2026-06-26
Notepad\+\+ HIGH 7.8
CVE-2026-46710

Notepad++ is a free and open-source source code editor. From 8.9.4 until 8.9.6, Notepad++ contains a local privilege escalation vulnerability in the …

Fix: 8.9.6+
Fix from $1,950 2026-06-26
Notepad\+\+ HIGH 7.8
CVE-2026-5525

A stack-based buffer overflow vulnerability exists in Notepad++ version 8.9.3 in the file drop handler component. When a user drags and drops a direc…

Patch available
Fix from $1,950 2026-04-10
Notepad\+\+ HIGH 7.3
CVE-2026-25926

Notepad++ is a free and open-source source code editor. An Unsafe Search Path vulnerability (CWE-426) exists in versions prior to 8.9.2 when launchin…

Fix: 8.9.2+
Fix from $1,950 2026-02-19
Notepad\+\+ HIGH 7.5
CVE-2025-15556 KEV

Notepad++ versions prior to 8.8.9, when using the WinGUp updater, contain an update integrity verification vulnerability where downloaded update meta…

Fix: 8.8.9+
Fix from $1,950 2026-02-03
Notepad\+\+ HIGH 7.8
CVE-2023-47452

An Untrusted search path vulnerability in notepad++ 6.5 allows local users to gain escalated privileges through the msimg32.dll file in the current w…

No fix yet
Fix from $1,950 2023-11-30
Notepad\+\+ HIGH 7.8
CVE-2023-6401

A vulnerability classified as problematic was found in NotePad++ up to 8.1. Affected by this vulnerability is an unknown functionality of the file db…

Fix: after 8.1
Fix from $1,950 2023-11-30
Notepad\+\+ MEDIUM 5.5
CVE-2023-40164

Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to global buffer read overflow in `nsCodingStateMachi…

Fix: after 8.5.6
Fix from $1,600 2023-08-25
Notepad\+\+ MEDIUM 5.5
CVE-2023-40166

Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to heap buffer read overflow in `FileManager::detectL…

Fix: after 8.5.6
Fix from $1,600 2023-08-25
Notepad\+\+ HIGH 7.8
CVE-2023-40031

Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to heap buffer write overflow in `Utf8_16_Read::conve…

Fix: after 8.5.6
Fix from $1,950 2023-08-25
Notepad\+\+ MEDIUM 5.5
CVE-2023-40036

Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to global buffer read overflow in `CharDistributionAn…

Fix: after 8.5.6
Fix from $1,600 2023-08-25
Notepad\+\+ MEDIUM 5.5
CVE-2022-31902

Notepad++ v8.4.1 was discovered to contain a stack overflow via the component Finder::add().

Fix: after 8.4.3
Fix from $1,600 2023-02-01
Notepad\+\+ MEDIUM 6.5
CVE-2022-31901

Buffer overflow in function Notepad_plus::addHotSpot in Notepad++ v8.4.3 and earlier allows attackers to crash the application via two crafted files.

Fix: after 8.4.3
Fix from $1,600 2023-01-19
Notepad\+\+ HIGH 7.8
CVE-2022-32168

Notepad++ versions 8.4.1 and before are vulnerable to DLL hijacking where an attacker can replace the vulnerable dll (UxTheme.dll) with his own dll a…

Fix: 8.4.5+
Fix from $1,950 2022-09-28
Notepad\+\+ HIGH 7.8
CVE-2019-16294EPSS 10%

SciLexer.dll in Scintilla in Notepad++ (x64) before 7.7 allows remote code execution or denial of service via Unicode characters in a crafted .ml fil…

Fix: 7.7+
Fix from $1,950 2019-09-14