# cve.now: Notepad-plus-plus

The newest entries naming Notepad-plus-plus as an affected vendor (up to 200), of 25 in all, 1 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-85995](https://cve.now/CVE-2026-85995.md): Notepad++: Authenticode verification bypass allows modified updater execution (CVSS 7.3)
- [CVE-2026-86056](https://cve.now/CVE-2026-86056.md): Notepad++: Null pointer dereference in NPPM\_SAVESESSION message handler causes crash (DoS) (CVSS 5.5)
- [CVE-2026-77605](https://cve.now/CVE-2026-77605.md): Notepad++ “Run by system” executes \*.txt.cmd when user selected \*.txt (target confusion → command execution) (CVSS 7.8)
- [CVE-2026-86054](https://cve.now/CVE-2026-86054.md): Notepad++: Stack Buffer Overflow in \`NppParameters::writeSession\` via overlong session path (CVSS 7.8)
- [CVE-2026-85288](https://cve.now/CVE-2026-85288.md): Notepad++: Shortcuts.xml macro HMAC bypass still reachable via the "Run a Macro Multiple Times" dialog (CVSS 6.7)
- [CVE-2026-85279](https://cve.now/CVE-2026-85279.md): Notepad++: Stack Buffer Overflow in Plugin Lexer Loading via Unchecked GetLexerCount() Return Value (CVSS 8.6)
- [CVE-2026-57233](https://cve.now/CVE-2026-57233.md): Notepad++: Path Traversal (Zip Slip) in WinGup Plugin Extraction (CVSS 8.1)
- [CVE-2026-52886](https://cve.now/CVE-2026-52886.md): Notepad++: session.xml backupFilePath starts\_with Bypass (CVSS 5.1)
- [CVE-2026-71858](https://cve.now/CVE-2026-71858.md): Notepad++: shortcuts.xml Macro HMAC Bypass Enables Conditional Elevated Command Execution (CVSS 5.4)
- [CVE-2026-54758](https://cve.now/CVE-2026-54758.md): Notepad++: Stack Buffer Overflow in expandNppEnvironmentStrs (CVSS 7.8)
- [CVE-2026-73250](https://cve.now/CVE-2026-73250.md): Notepad++: Install-time PowerShell command injection through installation path (CVSS 5.4)
- [CVE-2026-48770](https://cve.now/CVE-2026-48770.md): Notepad++ WM\_COPYDATA COPYDATA\_FULL\_CMDLINE local DoS crash (CVSS 5.0)
- [CVE-2026-48778](https://cve.now/CVE-2026-48778.md): Notepad++: Arbitrary Code Execution via config.xml commandLineInterpreter (CVSS 7.8)
- [CVE-2026-52885](https://cve.now/CVE-2026-52885.md): Notepad++ TOCTOU: HMAC Checks Disk, Executes from Memory (CVSS 7.5)
- [CVE-2026-46710](https://cve.now/CVE-2026-46710.md): Notepad++: Privilege Escalation in the Installer via Uncontrolled Executable Search Path (CVSS 7.5)
- [CVE-2026-48800](https://cve.now/CVE-2026-48800.md): Notepad++: Arbitrary Code Execution via shortcuts.xml UserCommand Injection (CVSS 7.8)
- [CVE-2026-52884](https://cve.now/CVE-2026-52884.md): Notepad++: CVE-2026-48800 Bypass (CVSS 7.8)
- [CVE-2026-25926](https://cve.now/CVE-2026-25926.md): Notepad++ has an Untrusted Search Path (CVSS 7.3)
- [CVE-2025-15556](https://cve.now/CVE-2025-15556.md): Notepad++ \< 8.8.9 WinGUp Updater Lacks Update Integrity Verification (CVSS 7.7, KEV)
- [CVE-2025-49144](https://cve.now/CVE-2025-49144.md): Notepad++ Privilege Escalation in Installer via Uncontrolled Executable Search Path (CVSS 7.3)
- [CVE-2023-40166](https://cve.now/CVE-2023-40166.md): Notepad++ heap buffer read overflow in FileManager::detectLanguageFromTextBegining (CVSS 5.5)
- [CVE-2023-40164](https://cve.now/CVE-2023-40164.md): Notepad++ global buffer read overflow in nsCodingStateMachine::NextState (CVSS 5.5)
- [CVE-2023-40036](https://cve.now/CVE-2023-40036.md): Notepad++ global buffer read overflow in CharDistributionAnalysis::HandleOneChar (CVSS 5.5)
- [CVE-2023-40031](https://cve.now/CVE-2023-40031.md): Notepad++ vulnerable to heap buffer write overflow in Utf8\_16\_Read::convert (CVSS 7.8)
- [CVE-2022-32168](https://cve.now/CVE-2022-32168.md): notepad-plus-plus - DLL Hijacking (CVSS 7.8)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/notepad-plus-plus
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.