KLA85380 PE vulnerability in Notepad++

Privilege escalation vulnerability was found in Notepad++. Malicious users can exploit this vulnerability to execute arbitrary code, gain privileges. Original advisories GHSA-9vx8-v79m-6m24 CVE-2025-49144 Exploitation Public exploits exist for this vulnerability. Related products Notepad++ CVE li...

Notepad Next 缓冲区错误漏洞

Notepad Next is a notepad program by dail8859 individual developer. A buffer error vulnerability exists in Notepad Next v0.11 and earlier versions, which stems from an out-of-bounds read in the lparser.C file, which may result in an over-read of the heap buffer...

PT-2025-26637

Name of the Vulnerable Software and Affected Versions Notepad++ versions 8.8.1 and prior Description Notepad++ is a free and open-source source code editor. A privilege escalation flaw exists in the Notepad++ installer versions 8.8.1 and prior due to insecure executable search paths. This allows...

PT-2025-27024 · Don Ho · Notepad++

Уязвимость установщика текстового редактора Notepad++ связана с недостатками разграничения доступа в результате неконтролируемого элемента пути поиска. Эксплуатация уязвимости может позволить нарушителю повысить свои привилегии и записывать произвольные файлы...

Exploit for Uncontrolled Search Path Element in Notepad-Plus-Plus Notepad\+\+

⚠️ IMPORTANT NOTICE: For security research and educational p...

CVE-2024-42036

Access permission verification vulnerability in the Notepad module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2023-0909

A vulnerability, which was classified as problematic, was found in cxasm notepad-- 1.22. This affects an unknown part of the component Directory Comparison Handler. The manipulation leads to denial of service. The attack needs to be approached locally. The associated identifier of this...

CVE-2023-47452

An Untrusted search path vulnerability in notepad++ 6.5 allows local users to gain escalated privileges through the msimg32.dll file in the current working directory...

CVE-2023-34159

Improper permission control vulnerability in the Notepad app.Successful exploitation of the vulnerability may lead to privilege escalation, which affects availability and confidentiality...

CVE-2023-40031

Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to heap buffer write overflow in Utf816Read::convert. This issue may lead to arbitrary code execution. As of time of publication, no known patches are available in existing versions of Notepad++...

CVE-2023-6401

A vulnerability classified as problematic was found in NotePad++ up to 8.1. Affected by this vulnerability is an unknown functionality of the file dbghelp.exe. The manipulation leads to uncontrolled search path. An attack has to be approached locally. The identifier VDB-246421 was assigned to thi...

CVE-2008-3436

The GUP generic update process in Notepad++ before 4.8.1 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning...

Notepad++ < 8.4.1 DLL hijacking vulnerability

Notepad++ versions 8.4.1 and before are vulnerable to DLL hijacking where an attacker can replace the vulnerable dll UxTheme.dll with his own dll and run arbitrary code in the context of Notepad++. Note that Nessus has not tested for this issue but has instead relied only on the application's...

Notepad++ < 8.1.1 Arbitrary Code Execution

The version of Notepad++ installed on the remote host is prior to 8.1.1. It is, therefore, affected by a arbitary code execution vulnerability in the dbghelp.exe file, allowing a attacker with local access to abuse the uncontrolled search path to execute arbitrary code and gain access. Note that...

CVE-2024-42036

Access permission verification vulnerability in the Notepad module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2024-42036

Access permission verification vulnerability in the Notepad module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2024-42036

Access permission verification vulnerability in the Notepad module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2024-42036

Access permission verification vulnerability in the Notepad module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2024-42036

The provided connected documents confirm CVE-2024-42036 affects the Notepad module with an access permission verification weakness that can impact confidentiality. According to the NVD entry, the base CVSS v3.1 is 7.5 (HIGH) with NETWORK attack vector, LOW attack complexity, NO privileges require...

PT-2024-29702 · Microsoft · Notepad++

Name of the Vulnerable Software and Affected Versions: Notepad affected versions not specified Description: A vulnerability exists in the access permission verification of the Notepad module. Successful exploitation of this issue may impact service confidentiality. Recommendations: At the moment,...