Approved changes feed: RSS · Atom
cpe:2.3:a:notepad-plus-plus:notepad\+\+:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Notepad Plus Plus (29252a6c-466d-52a8-9ad6-7ab7379c3cdf) |
|---|---|
| Product | Notepad++ (9379c5cf-9b89-57c2-b2d6-af24ec8aed1d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/notepad-plus-plus/notepad-plus-plus |
purl2cpe | 2026-10-12 21:11:49.869673 |
pkg:sourceforge/notepadplusplus.mirror |
purl2cpe | 2026-10-12 21:11:49.869677 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-25926 |
vulnerable | 2026-06-08 07:53:20.614778 |
Notepad++ has an Untrusted Search Path
HIGH (7.3)
Notepad++ is a free and open-source source code editor. An Unsafe Search Path vulnerability (CWE-426) exists in versions prior to 8.9.2 when launching Windows Explorer without an absolute executable path. This may allow execution of a malicious explorer.exe if an attacker can control the process working directory. Under certain conditions, this could lead to arbitrary code execution in the context of the running application. Version 8.9.2 patches the issue.
Published: 2026-02-18T23:07:36.383Z
Updated: 2026-02-19T17:45:27.028Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-15556 |
vulnerable | 2026-06-08 07:06:36.452357 |
Notepad++ < 8.8.9 WinGUp Updater Lacks Update Integrity Verification
Notepad++ versions prior to 8.8.9, when using the WinGUp updater, contain an update integrity verification vulnerability where downloaded update metadata and installers are not cryptographically verified. An attacker able to intercept or redirect update traffic can cause the updater to download and execute an attacker-controlled installer, resulting in arbitrary code execution with the privileges of the user.
Published: 2026-02-03T00:50:29.516Z
Updated: 2026-03-05T01:29:51.538Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6401 |
vulnerable | 2026-06-08 06:19:47.222637 |
NotePad++ dbghelp.exe uncontrolled search path
MEDIUM (5.3)
A vulnerability classified as problematic was found in NotePad++ up to 8.1. Affected by this vulnerability is an unknown functionality of the file dbghelp.exe. The manipulation leads to uncontrolled search path. An attack has to be approached locally. The identifier VDB-246421 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2023-11-30T14:31:04.006Z
Updated: 2024-08-02T08:28:21.819Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-40166 |
vulnerable | 2026-06-08 06:09:41.349132 |
Notepad++ heap buffer read overflow in FileManager::detectLanguageFromTextBegining
MEDIUM (5.5)
Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to heap buffer read overflow in `FileManager::detectLanguageFromTextBegining `. The exploitability of this issue is not clear. Potentially, it may be used to leak internal memory allocation information. As of time of publication, no known patches are available in existing versions of Notepad++.
Published: 2023-08-25T20:20:20.390Z
Updated: 2024-10-02T14:50:07.295Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-40164 |
vulnerable | 2026-06-08 06:09:41.347050 |
Notepad++ global buffer read overflow in nsCodingStateMachine::NextState
MEDIUM (5.5)
Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to global buffer read overflow in `nsCodingStateMachine::NextStater`. The exploitability of this issue is not clear. Potentially, it may be used to leak internal memory allocation information. As of time of publication, no known patches are available in existing versions of Notepad++.
Published: 2023-08-25T20:12:58.877Z
Updated: 2024-10-02T14:52:01.393Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-40036 |
vulnerable | 2026-06-08 06:09:41.082743 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-40031 |
vulnerable | 2026-06-08 06:09:41.074512 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-32168 |
vulnerable | 2026-06-08 05:44:42.629014 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-31902 |
vulnerable | 2026-06-08 05:44:42.430674 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-31901 |
vulnerable | 2026-06-08 05:44:42.430047 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-16294 |
vulnerable | 2026-06-08 05:13:08.264468 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.