Notepad-8.9.6-PoC

Notepad++ PoCs CVE-2026-48770 / CVE-2026-48778 / CVE-2026-488...

CVE-2026-48770

creationtimestamp| type| source ---|---|--- 2026-05-28 12:51:30+00:00| seen| https://www.acn.gov.it/portale/w/notepad-poc-pubblici-per-le-cve-2026-48800-cve-2026-48778-e-cve-2026-48770 2026-06-01 04:52:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116673056260872400 2026-06-01...

CVE-2026-48778

creationtimestamp| type| source ---|---|--- 2026-05-28 12:51:30+00:00| seen| https://www.acn.gov.it/portale/w/notepad-poc-pubblici-per-le-cve-2026-48800-cve-2026-48778-e-cve-2026-48770 2026-05-29 22:04:26+00:00| seen| https://bsky.app/profile/crustytldr.bsky.social/post/3mmzk5ms7vf2l 2026-05-30...

ThreatsDay Bulletin: AI Prompt RCE, Claude 0-Click, RenEngine Loader, Auto 0-Days & 25+ Stories

Threat activity this week shows one consistent signal — attackers are leaning harder on what already works. Instead of flashy new exploits, many operations are built around quiet misuse of trusted tools, familiar workflows, and overlooked exposures that sit in plain sight. Another shift is how...

Exploit for CVE-2026-20841

Purpose The purpose of this work is to investigate the RCE vul...

CVE-2026-20841

Improper neutralization of special elements used in a command 'command injection' in Windows Notepad App allows an unauthorized attacker to execute code locally...

CVE-2026-20841 Windows Notepad App Remote Code Execution Vulnerability

...

CVE-2023-40036

Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to global buffer read overflow in CharDistributionAnalysis::HandleOneChar. The exploitability of this issue is not clear. Potentially, it may be used to leak internal memory allocation information. As ...

EUVD-2022-53398

Malicious code in bioql PyPI...

EUVD-2025-19601

Malicious code in bioql PyPI...

PT-2025-38778

Name of the Vulnerable Software and Affected Versions Dashboard Notepad versions through 1.42 Description A Cross-Site Request Forgery CSRF issue exists in Stephanie Leary Dashboard Notepad. This allows for the execution of unwanted actions on behalf of an authenticated user. Recommendations Upda...

Exploit for CVE-2025-49144

CVE-2025-49144PoC 📌 CVE-2025-...

CVE-2025-49144 Notepad++ Privilege Escalation in Installer via Uncontrolled Executable Search Path

Notepad++ is a free and open-source source code editor. In versions 8.8.1 and prior, a privilege escalation vulnerability exists in the Notepad++ v8.8.1 installer that allows unprivileged users to gain SYSTEM-level privileges through insecure executable search paths. An attacker could use social...

KLA85380 PE vulnerability in Notepad++

Privilege escalation vulnerability was found in Notepad++. Malicious users can exploit this vulnerability to execute arbitrary code, gain privileges. Original advisories GHSA-9vx8-v79m-6m24 CVE-2025-49144 Exploitation Public exploits exist for this vulnerability. Related products Notepad++ CVE li...

PT-2025-26637

Name of the Vulnerable Software and Affected Versions Notepad++ versions 8.8.1 and prior Description Notepad++ is a free and open-source source code editor. A privilege escalation flaw exists in the Notepad++ installer versions 8.8.1 and prior due to insecure executable search paths. This allows...

CVE-2023-40031

Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to heap buffer write overflow in Utf816Read::convert. This issue may lead to arbitrary code execution. As of time of publication, no known patches are available in existing versions of Notepad++...

CVE-2023-34159

Improper permission control vulnerability in the Notepad app.Successful exploitation of the vulnerability may lead to privilege escalation, which affects availability and confidentiality...

CVE-2022-48227

An issue was discovered in Acuant AsureID Sentinel before 5.2.149. It allows elevation of privileges because it opens Notepad after the installation of AssureID, Identify x64, and Identify x86, aka CORE-7361...

CVE-2022-31902

Notepad++ v8.4.1 was discovered to contain a stack overflow via the component Finder::add...

CVE-2022-31901

Buffer overflow in function Notepadplus::addHotSpot in Notepad++ v8.4.3 and earlier allows attackers to crash the application via two crafted files...