CVE-2019-16294

2019-09-1416:15:10

Google

osv.dev

7.8 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.5%

JSON

SciLexer.dll in Scintilla in Notepad++ (x64) before 7.7 allows remote code execution or denial of service via Unicode characters in a crafted .ml file.

CPENameOperatorVersion
notepad-plus-pluseq6.9.1
notepad-plus-pluseq5.9.1
notepad-plus-pluseq6.8.4
notepad-plus-pluseq6.4.2
notepad-plus-pluseq6.6.7
notepad-plus-pluseq6.6.8
notepad-plus-pluseq6.8.8
notepad-plus-pluseq5.5
notepad-plus-pluseq6.3.2
notepad-plus-pluseq6.6

Name	Operator	Version
notepad-plus-plus	eq	6.9.1
notepad-plus-plus	eq	5.9.1
notepad-plus-plus	eq	6.8.4
notepad-plus-plus	eq	6.4.2
notepad-plus-plus	eq	6.6.7
notepad-plus-plus	eq	6.6.8
notepad-plus-plus	eq	6.8.8
notepad-plus-plus	eq	5.5
notepad-plus-plus	eq	6.3.2
notepad-plus-plus	eq	6.6