agentprime: notepad-plus-plus

agentprime: notepad-plus-plusEvery new CVE for notepad-plus-plus.https://agentprime.io/CVE-2026-85995: Notepad++: Authenticode verification bypass allows modified updater executionhttps://agentprime.io/advisories/CVE-2026-85995/https://agentprime.io/advisories/CVE-2026-85995/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Sep 2026 17:15:05 GMTCVECVE-2026-86056: Notepad++: Null pointer dereference in NPPM_SAVESESSION message handler causes crash (DoS)https://agentprime.io/advisories/CVE-2026-86056/https://agentprime.io/advisories/CVE-2026-86056/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Sep 2026 17:14:13 GMTCVECVE-2026-77605: Notepad++ “Run by system” executes *.txt.cmd when user selected *.txt (target confusion → command execution)https://agentprime.io/advisories/CVE-2026-77605/https://agentprime.io/advisories/CVE-2026-77605/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Sep 2026 17:13:21 GMTCVECVE-2026-86054: Notepad++: Stack Buffer Overflow in `NppParameters::writeSession` via overlong session pathhttps://agentprime.io/advisories/CVE-2026-86054/https://agentprime.io/advisories/CVE-2026-86054/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Sep 2026 17:12:38 GMTCVECVE-2026-85288: Notepad++: Shortcuts.xml macro HMAC bypass still reachable via the "Run a Macro Multiple Times" dialoghttps://agentprime.io/advisories/CVE-2026-85288/https://agentprime.io/advisories/CVE-2026-85288/CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Sep 2026 17:11:47 GMTCVECVE-2026-85279: Notepad++: Stack Buffer Overflow in Plugin Lexer Loading via Unchecked GetLexerCount() Return Valuehttps://agentprime.io/advisories/CVE-2026-85279/https://agentprime.io/advisories/CVE-2026-85279/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Sep 2026 17:08:42 GMTCVECVE-2026-57233: Notepad++: Path Traversal (Zip Slip) in WinGup Plugin Extractionhttps://agentprime.io/advisories/CVE-2026-57233/https://agentprime.io/advisories/CVE-2026-57233/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 17 Aug 2026 20:10:37 GMTCVECVE-2026-52886: Notepad++: session.xml backupFilePath starts_with Bypasshttps://agentprime.io/advisories/CVE-2026-52886/https://agentprime.io/advisories/CVE-2026-52886/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 17 Aug 2026 20:09:32 GMTCVECVE-2026-71858: Notepad++: shortcuts.xml Macro HMAC Bypass Enables Conditional Elevated Command Executionhttps://agentprime.io/advisories/CVE-2026-71858/https://agentprime.io/advisories/CVE-2026-71858/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 17 Aug 2026 20:08:21 GMTCVECVE-2026-54758: Notepad++: Stack Buffer Overflow in expandNppEnvironmentStrshttps://agentprime.io/advisories/CVE-2026-54758/https://agentprime.io/advisories/CVE-2026-54758/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 17 Aug 2026 20:05:51 GMTCVECVE-2026-73250: Notepad++: Install-time PowerShell command injection through installation pathhttps://agentprime.io/advisories/CVE-2026-73250/https://agentprime.io/advisories/CVE-2026-73250/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 22:04:54 GMTCVECVE-2026-48770: Notepad++ WM_COPYDATA COPYDATA_FULL_CMDLINE local DoS crashhttps://agentprime.io/advisories/CVE-2026-48770/https://agentprime.io/advisories/CVE-2026-48770/CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 26 Jun 2026 20:22:17 GMTCVECVE-2026-48778: Notepad++: Arbitrary Code Execution via config.xml commandLineInterpreterhttps://agentprime.io/advisories/CVE-2026-48778/https://agentprime.io/advisories/CVE-2026-48778/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 26 Jun 2026 20:21:17 GMTCVECVE-2026-52885: Notepad++ TOCTOU: HMAC Checks Disk, Executes from Memoryhttps://agentprime.io/advisories/CVE-2026-52885/https://agentprime.io/advisories/CVE-2026-52885/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 26 Jun 2026 20:19:04 GMTCVECVE-2026-46710: Notepad++: Privilege Escalation in the Installer via Uncontrolled Executable Search Pathhttps://agentprime.io/advisories/CVE-2026-46710/https://agentprime.io/advisories/CVE-2026-46710/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 26 Jun 2026 20:16:16 GMTCVECVE-2026-48800: Notepad++: Arbitrary Code Execution via shortcuts.xml UserCommand Injectionhttps://agentprime.io/advisories/CVE-2026-48800/https://agentprime.io/advisories/CVE-2026-48800/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 26 Jun 2026 20:12:43 GMTCVECVE-2026-52884: Notepad++: CVE-2026-48800 Bypasshttps://agentprime.io/advisories/CVE-2026-52884/https://agentprime.io/advisories/CVE-2026-52884/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 26 Jun 2026 20:11:40 GMTCVECVE-2026-25926: Notepad++ has an Untrusted Search Pathhttps://agentprime.io/advisories/CVE-2026-25926/https://agentprime.io/advisories/CVE-2026-25926/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 18 Feb 2026 23:07:36 GMTCVECVE-2025-15556: Notepad++ < 8.8.9 WinGUp Updater Lacks Update Integrity Verificationhttps://agentprime.io/advisories/CVE-2025-15556/https://agentprime.io/advisories/CVE-2025-15556/CVSS 7.7 (High). Critical: In CISA’s KEV catalogue since 12 Feb 2026: it is known to be exploited. Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Feb 2026 00:50:29 GMTCVEcriticalKEVCVE-2025-49144: Notepad++ Privilege Escalation in Installer via Uncontrolled Executable Search Pathhttps://agentprime.io/advisories/CVE-2025-49144/https://agentprime.io/advisories/CVE-2025-49144/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 23 Jun 2025 19:01:16 GMTCVECVE-2023-40166: Notepad++ heap buffer read overflow in FileManager::detectLanguageFromTextBegininghttps://agentprime.io/advisories/CVE-2023-40166/https://agentprime.io/advisories/CVE-2023-40166/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Aug 2023 20:20:20 GMTCVECVE-2023-40164: Notepad++ global buffer read overflow in nsCodingStateMachine::NextStatehttps://agentprime.io/advisories/CVE-2023-40164/https://agentprime.io/advisories/CVE-2023-40164/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Aug 2023 20:12:58 GMTCVECVE-2023-40036: Notepad++ global buffer read overflow in CharDistributionAnalysis::HandleOneCharhttps://agentprime.io/advisories/CVE-2023-40036/https://agentprime.io/advisories/CVE-2023-40036/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Aug 2023 19:58:33 GMTCVECVE-2023-40031: Notepad++ vulnerable to heap buffer write overflow in Utf8_16_Read::converthttps://agentprime.io/advisories/CVE-2023-40031/https://agentprime.io/advisories/CVE-2023-40031/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Aug 2023 19:49:23 GMTCVECVE-2022-32168: notepad-plus-plus - DLL Hijackinghttps://agentprime.io/advisories/CVE-2022-32168/https://agentprime.io/advisories/CVE-2022-32168/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Sep 2022 09:00:15 GMTCVE