Product by Notepad++
Notepad\+\+
20 known vulnerabilities in Notepad\+\+ (Notepad++), 1 of them actively exploited (CISA KEV).
Key figures
20
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2025-15556 | Notepad++ < 8.8.9 WinGUp Updater Lacks Update Integrity Verification In CISA KEValso in 1 other product | 7.5 | |
| High | CVE-2019-16294 | Scintilla: Denial of Service | 7.8 | |
| High | CVE-2026-48778 | Notepad++: Arbitrary Code Execution via config.xml commandLineInterpreter | 7.8 | |
| Medium | CVE-2022-31901 | Notepad++: Buffer Overflow | 6.5 | |
| High | CVE-2022-32168 | notepad-plus-plus - DLL Hijacking | 7.8 | |
| High | CVE-2023-47452 | Notepad++: security vulnerability | 7.8 | |
| High | CVE-2026-48800 | Notepad++: Arbitrary Code Execution via shortcuts.xml UserCommand Injection | 7.8 | |
| High | CVE-2026-52884 | Notepad++: CVE-2026-48800 Bypass | 7.8 | |
| High | CVE-2026-46710 | Notepad++: Privilege Escalation in the Installer via Uncontrolled Executable Search Path | 7.8 | |
| High | CVE-2023-40031 | Notepad++ vulnerable to heap buffer write overflow in Utf8_16_Read::convert | 7.8 | |
| High | CVE-2026-52885 | Notepad++ TOCTOU: HMAC Checks Disk, Executes from Memory | 6.3 | |
| High | CVE-2026-5525 | Stack-Based Buffer Overflow in Notepad++ File Drop Handler leads to DoS | 7.8 | |
| High | CVE-2026-25926 | Notepad++ has an Untrusted Search Path | 7.3 | |
| Medium | CVE-2023-40164 | Notepad++ global buffer read overflow in nsCodingStateMachine::NextState | 5.5 | |
| Medium | CVE-2022-31902 | Notepad++: security vulnerability | 5.5 | |
| Medium | CVE-2026-48770 | Notepad++ WM_COPYDATA COPYDATA_FULL_CMDLINE local DoS crash | 5.0 | |
| Medium | CVE-2023-40166 | Notepad++ heap buffer read overflow in FileManager::detectLanguageFromTextBegining | 5.5 | |
| Medium | CVE-2026-6539 | Notepad++ 8.9.3 Format String Injection via nativeLang.xml | 4.4 | |
| Medium | CVE-2023-40036 | Notepad++ global buffer read overflow in CharDistributionAnalysis::HandleOneChar | 5.5 | |
| High | CVE-2023-6401 | NotePad++ dbghelp.exe uncontrolled search path | 5.3 |