Lucene search
+L

7 matches found

attackerkb
attackerkb
added 2026/02/03 12:50 a.m.7 views

CVE-2025-15556

Notepad++ versions prior to 8.8.9, when using the WinGUp updater, contain an update integrity verification vulnerability where downloaded update metadata and installers are not cryptographically verified. An attacker able to intercept or redirect update traffic can cause the updater to download a...

7.7CVSS6.4AI score0.0171EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/02/03 12:50 a.m.90 views

CVE-2025-15556 Notepad++ < 8.8.9 WinGUp Updater Lacks Update Integrity Verification

Notepad++ versions prior to 8.8.9, when using the WinGUp updater, contain an update integrity verification vulnerability where downloaded update metadata and installers are not cryptographically verified. An attacker able to intercept or redirect update traffic can cause the updater to download a...

7.7CVSS0.0171EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2026/02/03 12:50 a.m.4 views

CVE-2025-15556 Notepad++ < 8.8.9 WinGUp Updater Lacks Update Integrity Verification

Notepad++ versions prior to 8.8.9, when using the WinGUp updater, contain an update integrity verification vulnerability where downloaded update metadata and installers are not cryptographically verified. An attacker able to intercept or redirect update traffic can cause the updater to download a...

7.7CVSS6.4AI score0.0171EPSS
SaveExploits0References5
CVE
CVE
added 2026/02/03 12:50 a.m.150 views

CVE-2025-15556

Notepad++ versions prior to 8.8.9 using the WinGUp updater are affected by an update integrity verification vulnerability: downloaded update metadata and installers are not cryptographically verified. An attacker who can intercept or redirect update traffic can cause the updater to download and e...

7.7CVSS6.4AI score0.0171EPSS
SaveIn wildExploits0References7Affected Software1
VulnCheck KEV
VulnCheck KEV
added 2026/02/02 12:00 a.m.6 views

VulnCheck KEV: CVE-2025-15556

Notepad++ when using the WinGUp updater, contains a download of code without integrity check vulnerability that could allow an attacker to intercept or redirect update traffic to download and execute an attacker-controlled installer. This could lead to arbitrary code execution with the privileges...

7.7CVSS6.4AI score0.0171EPSS
SaveIn wildExploits0References7
Positive Technologies
Positive Technologies
added 2025/12/09 12:00 a.m.14 views

PT-2026-5735

Name of the Vulnerable Software and Affected Versions Notepad++ versions prior to 8.8.9 Description The Notepad++ WinGUp updater has a flaw in how it verifies the integrity of updates. This allows an attacker who can intercept or redirect update traffic to cause the updater to download and execut...

7.7CVSS6.7AI score0.0171EPSS
SaveExploits0References47
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2014-2415

Malware in sbrugna...

7.6CVSS6.4AI score0.00897EPSS
SaveExploits0References2
Rows per page
Query Builder