Approved changes feed: RSS · Atom

cpe:2.3:a:notepad-plus-plus:notepad\+\+:7.3.3:*:*:*:*:*:*:*

part: a version: 7.3.3 update: *

VendorNotepad Plus Plus (29252a6c-466d-52a8-9ad6-7ab7379c3cdf)
ProductNotepad++ (9379c5cf-9b89-57c2-b2d6-af24ec8aed1d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/notepad-plus-plus/notepad-plus-plus purl2cpe 2026-10-12 21:11:49.870150
pkg:sourceforge/notepadplusplus.mirror purl2cpe 2026-10-12 21:11:49.870157

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-8803 not_vulnerable 2026-06-08 05:10:08.918349 Details available
Notepad++ 7.3.3 (32-bit) with Hex Editor Plugin v0.9.5 might allow user-assisted attackers to execute code via a crafted file, because of a "Data from Faulting Address controls Code Flow" issue. One threat model is a victim who obtains an untrusted crafted file from a remote location and issues several user-defined commands.
Published: 2017-07-05T19:00:00.000Z
Updated: 2024-08-05T16:48:22.278Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.