NO
Product
Notepad++
On CISA KEVExploited in the wild
20
CVEs
1
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 12Medium 8Low 0
Watch
Add Notepad++ to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-31901 | 6.5 | Jan 19 | Buffer overflow in function Notepad_plus::addHotSpot in Notepad++ v8.4.3 and earlier allows attackers to crash the application via two crafted files Affected: through 8.4.3 |
| CVE-2026-52885 | 6.3 | Jun 26 | Notepad++ TOCTOU: HMAC Checks Disk, Executes from Memory Affected: before 8.9.6.4 |
| CVE-2023-40166 | 5.5 | Aug 25 | Notepad++ is a free and open-source source code editor Affected: through 8.5.6 |
| CVE-2023-40164 | 5.5 | Aug 25 | Notepad++ is a free and open-source source code editor Affected: through 8.5.6 |
| CVE-2023-40036 | 5.5 | Aug 25 | Notepad++ is a free and open-source source code editor Affected: through 8.5.6 |
| CVE-2022-31902 | 5.5 | Feb 1 | Notepad++ v8.4.1 was discovered to contain a stack overflow via the component Finder::add() Affected: through 8.4.3 |
| CVE-2026-48770 | 5.0 | Jun 26 | Notepad++ WM_COPYDATA COPYDATA_FULL_CMDLINE local DoS crash Affected: before 8.9.6.1 |
| CVE-2026-6539 | 4.4 | Apr 30 | Notepad++ 8.9.3 Format String Injection via nativeLang.xml Affected: 8.9.3 |
Showing 8