5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
5.8 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
20.9%
Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to global buffer read overflow in CharDistributionAnalysis::HandleOneChar
. The exploitability of this issue is not clear. Potentially, it may be used to leak internal memory allocation information. As of time of publication, no known patches are available in existing versions of Notepad++.
Vendor | Product | Version | CPE |
---|---|---|---|
notepad\-plus\-plus | notepad\+\+ | * | cpe:2.3:a:notepad\-plus\-plus:notepad\+\+:*:*:*:*:*:*:*:* |
[
{
"vendor": "notepad-plus-plus",
"product": "notepad-plus-plus",
"versions": [
{
"version": "<= 8.5.6",
"status": "affected"
}
]
}
]
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
5.8 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
20.9%