Notepad-Plus-Plus
10 known vulnerabilities
Top Products
Notepad++ is a free and open-source source code editor. Prior to 8.9.6.4, NppCommands.cpp checks the HMAC of the on-disk
Notepad++ is a free and open-source source code editor. In v8.9.6.1, isInTrustedDirectory() does NOT canonicalize the pa
Notepad++ is a free and open-source source code editor. Prior to 8.9.6.1, the <Command> tag text content inside <UserDef
Notepad++ is a free and open-source source code editor. Prior to 8.9.6.1, the <GUIConfig name="commandLineInterpreter">
Notepad++ is a free and open-source source code editor. Prior to 8.9.6.1, a local process in the same interactive Window
Notepad++ is a free and open-source source code editor. From 8.9.4 until 8.9.6, Notepad++ contains a local privilege esc
Notepad++ 8.9.3 contains a format string injection vulnerability in the Find Results panel handler that allows attackers
A stack-based buffer overflow vulnerability exists in Notepad++ version 8.9.3 in the file drop handler component. When a
Notepad++ is a free and open-source source code editor. An Unsafe Search Path vulnerability (CWE-426) exists in versions
Notepad++ versions prior to 8.8.9, when using the WinGUp updater, contain an update integrity verification vulnerability
Frequently Asked Questions
How many CVEs affect Notepad-Plus-Plus?
Notepad-Plus-Plus has 10 CVE records in our database, including 0 critical and 6 high severity vulnerabilities. 1 of these are listed in CISA's Known Exploited Vulnerabilities catalog.
What are the most severe Notepad-Plus-Plus vulnerabilities?
Notepad-Plus-Plus has 0 critical severity (CVSS 9.0+) and 6 high severity (CVSS 7.0-8.9) vulnerabilities. 1 vulnerabilities are confirmed as actively exploited in the wild.
How can I scan for Notepad-Plus-Plus vulnerabilities?
CyberStrike's AI-powered security agents automatically detect vulnerabilities in Notepad-Plus-Plus products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.
Detect Notepad-Plus-Plus Vulnerabilities
CyberStrike scans your infrastructure for Notepad-Plus-Plus vulnerabilities and provides real-time remediation guidance.
Get Started