notepad-plus-plus.

Notepad++: Authenticode verification bypass allows modified updater execution

• notepad-plus-plus
• Weak cryptography or TLS

Notepad++: Null pointer dereference in NPPM_SAVESESSION message handler causes crash (DoS)

• notepad-plus-plus
• Memory corruption

Notepad++ “Run by system” executes *.txt.cmd when user selected *.txt (target confusion → command execution)

• notepad-plus-plus
• CWE-20
• CWE-706

Notepad++: Stack Buffer Overflow in `NppParameters::writeSession` via overlong session path

• notepad-plus-plus
• Memory corruption

Notepad++: Shortcuts.xml macro HMAC bypass still reachable via the "Run a Macro Multiple Times" dialog

• notepad-plus-plus
• Command injection
• CWE-345

Notepad++: Stack Buffer Overflow in Plugin Lexer Loading via Unchecked GetLexerCount() Return Value

• notepad-plus-plus
• Memory corruption

Notepad++: Path Traversal (Zip Slip) in WinGup Plugin Extraction

• notepad-plus-plus
• Path traversal

Notepad++: session.xml backupFilePath starts_with Bypass

• notepad-plus-plus
• Path traversal

Notepad++: shortcuts.xml Macro HMAC Bypass Enables Conditional Elevated Command Execution

• notepad-plus-plus
• Command injection
• CWE-345

Notepad++: Stack Buffer Overflow in expandNppEnvironmentStrs

• notepad-plus-plus
• Memory corruption

Notepad++: Install-time PowerShell command injection through installation path

• notepad-plus-plus
• Command injection

Notepad++ WM_COPYDATA COPYDATA_FULL_CMDLINE local DoS crash

• notepad-plus-plus
• Memory corruption

Notepad++: Arbitrary Code Execution via config.xml commandLineInterpreter

• notepad-plus-plus
• Command injection

Notepad++ TOCTOU: HMAC Checks Disk, Executes from Memory

• notepad-plus-plus
• Race condition

Notepad++: Privilege Escalation in the Installer via Uncontrolled Executable Search Path

• notepad-plus-plus
• CWE-426

Notepad++: Arbitrary Code Execution via shortcuts.xml UserCommand Injection

• notepad-plus-plus
• Command injection

Notepad++: CVE-2026-48800 Bypass

• notepad-plus-plus
• CWE-42

Notepad++ has an Untrusted Search Path

• notepad-plus-plus
• CWE-426

Notepad++ < 8.8.9 WinGUp Updater Lacks Update Integrity Verification

• notepad-plus-plus
• CWE-494

Notepad++ Privilege Escalation in Installer via Uncontrolled Executable Search Path

• notepad-plus-plus
• Broken access control
• CWE-272

Notepad++ heap buffer read overflow in FileManager::detectLanguageFromTextBegining

• notepad-plus-plus
• Memory corruption

Notepad++ global buffer read overflow in nsCodingStateMachine::NextState

• notepad-plus-plus
• Memory corruption

Notepad++ global buffer read overflow in CharDistributionAnalysis::HandleOneChar

• notepad-plus-plus
• Memory corruption

Notepad++ vulnerable to heap buffer write overflow in Utf8_16_Read::convert

• notepad-plus-plus
• Memory corruption

notepad-plus-plus - DLL Hijacking

• notepad-plus-plus
• CWE-427