Filtered by vendor Notepad-plus-plus Subscriptions
Total 11 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-6401 1 Notepad-plus-plus 1 Notepad\+\+ 2024-11-21 5.3 Medium
A vulnerability classified as problematic was found in NotePad++ up to 8.1. Affected by this vulnerability is an unknown functionality of the file dbghelp.exe. The manipulation leads to uncontrolled search path. An attack has to be approached locally. The identifier VDB-246421 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2023-47452 1 Notepad-plus-plus 1 Notepad\+\+ 2024-11-21 7.8 High
An Untrusted search path vulnerability in notepad++ 6.5 allows local users to gain escalated privileges through the msimg32.dll file in the current working directory.
CVE-2023-40166 1 Notepad-plus-plus 1 Notepad\+\+ 2024-11-21 5.5 Medium
Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to heap buffer read overflow in `FileManager::detectLanguageFromTextBegining `. The exploitability of this issue is not clear. Potentially, it may be used to leak internal memory allocation information. As of time of publication, no known patches are available in existing versions of Notepad++.
CVE-2023-40164 1 Notepad-plus-plus 1 Notepad\+\+ 2024-11-21 5.5 Medium
Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to global buffer read overflow in `nsCodingStateMachine::NextStater`. The exploitability of this issue is not clear. Potentially, it may be used to leak internal memory allocation information. As of time of publication, no known patches are available in existing versions of Notepad++.
CVE-2023-40036 1 Notepad-plus-plus 1 Notepad\+\+ 2024-11-21 5.5 Medium
Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to global buffer read overflow in `CharDistributionAnalysis::HandleOneChar`. The exploitability of this issue is not clear. Potentially, it may be used to leak internal memory allocation information. As of time of publication, no known patches are available in existing versions of Notepad++.
CVE-2023-40031 1 Notepad-plus-plus 1 Notepad\+\+ 2024-11-21 7.8 High
Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to heap buffer write overflow in `Utf8_16_Read::convert`. This issue may lead to arbitrary code execution. As of time of publication, no known patches are available in existing versions of Notepad++.
CVE-2022-32168 1 Notepad-plus-plus 1 Notepad\+\+ 2024-11-21 7.8 High
Notepad++ versions 8.4.1 and before are vulnerable to DLL hijacking where an attacker can replace the vulnerable dll (UxTheme.dll) with his own dll and run arbitrary code in the context of Notepad++.
CVE-2022-31902 1 Notepad-plus-plus 1 Notepad\+\+ 2024-11-21 5.5 Medium
Notepad++ v8.4.1 was discovered to contain a stack overflow via the component Finder::add().
CVE-2022-31901 1 Notepad-plus-plus 1 Notepad\+\+ 2024-11-21 6.5 Medium
Buffer overflow in function Notepad_plus::addHotSpot in Notepad++ v8.4.3 and earlier allows attackers to crash the application via two crafted files.
CVE-2019-16294 2 Notepad-plus-plus, Scintilla 2 Notepad\+\+, Scintilla 2024-11-21 7.8 High
SciLexer.dll in Scintilla in Notepad++ (x64) before 7.7 allows remote code execution or denial of service via Unicode characters in a crafted .ml file.
CVE-2017-8803 2 Mh-nexus, Notepad-plus-plus 2 Hex Editor, Notepad\+\+ 2024-11-21 7.8 High
Notepad++ 7.3.3 (32-bit) with Hex Editor Plugin v0.9.5 might allow user-assisted attackers to execute code via a crafted file, because of a "Data from Faulting Address controls Code Flow" issue. One threat model is a victim who obtains an untrusted crafted file from a remote location and issues several user-defined commands.