Notepad-plus-plus
4 CVEs tracked since 2023. Since Aug 2023, none of them reached CISA KEV.
Notepad-plus-plus CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2023-08 | 4 | 0 |
Products
The products that kept showing up in Notepad-plus-plus's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 15 most recently published vulnerabilities affecting Notepad-plus-plus.
- CVE-2026-85995Notepad++: Authenticode verification bypass allows modified updater execution7.3
- CVE-2026-86056Notepad++: Null pointer dereference in NPPM_SAVESESSION message handler causes crash (DoS)5.5
- CVE-2026-77605Notepad++ “Run by system” executes *.txt.cmd when user selected *.txt (target confusion → command execution)7.8
- CVE-2026-86054Notepad++: Stack Buffer Overflow in `NppParameters::writeSession` via overlong session path7.8
- CVE-2026-85288Notepad++: Shortcuts.xml macro HMAC bypass still reachable via the "Run a Macro Multiple Times" dialog6.7
- CVE-2026-85279Notepad++: Stack Buffer Overflow in Plugin Lexer Loading via Unchecked GetLexerCount() Return Value8.6
- CVE-2026-57233Notepad++: Path Traversal (Zip Slip) in WinGup Plugin Extraction8.1
- CVE-2026-52886Notepad++: session.xml backupFilePath starts_with Bypass—
- CVE-2026-71858Notepad++: shortcuts.xml Macro HMAC Bypass Enables Conditional Elevated Command Execution—
- CVE-2026-54758Notepad++: Stack Buffer Overflow in expandNppEnvironmentStrs7.8
- CVE-2026-73250Notepad++: Install-time PowerShell command injection through installation path—
- CVE-2026-48770Notepad++ WM_COPYDATA COPYDATA_FULL_CMDLINE local DoS crash5.0
- CVE-2026-48778Notepad++: Arbitrary Code Execution via config.xml commandLineInterpreter7.8
- CVE-2026-52885Notepad++ TOCTOU: HMAC Checks Disk, Executes from Memory6.3
- CVE-2026-46710Notepad++: Privilege Escalation in the Installer via Uncontrolled Executable Search Path7.8
The record
- Peak rank
- #197 in Aug 2023
- Busiest month shown
- Aug 2023, 4 CVEs
- Months with a KEV entry
- 0 since Aug 2023
- Monthly snapshots
- 1 since 2023