Notepad++ Download of Code Without Integrity Check Vulnerability

Mô tả

Tham khảo

• community.notepad-plus-plus.org/topic/27298/notepad-v8-8-9-vulnerability-fix · Release Notes
• notepad-plus-plus/notepad-plus-plus commit bcf2aa6 · Patch
• notepad-plus-plus/wingup commit ce00375 · Patch
• notepad-plus-plus.org/news/hijacked-incident-info-update · Patch
• vulncheck.com/advisories/notepad-plus-plus-wingup-updater-lacks-update-integrity-verification · Third Party Advisory
• notepad-plus-plus.org//news//clarification-security-incident · Vendor Advisory
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• CISA KEV · CVE-2025-15556

Lỗ hổng khác của notepad++

• CVE-2026-52885TRUNG BÌNH 6.3Notepad++ is a free and open-source source code editor. Prior to 8.9.6.4, NppCommands.cpp checks the HMAC of the on-disk shortcuts.xml at th…
• CVE-2026-52884CAO 7.8Notepad++ is a free and open-source source code editor. In v8.9.6.1, isInTrustedDirectory() does NOT canonicalize the path before checking. …
• CVE-2026-48800CAO 7.8Notepad++ is a free and open-source source code editor. Prior to 8.9.6.1, the <Command> tag text content inside <UserDefinedCommands> in sho…
• CVE-2026-48778CAO 7.8Notepad++ is a free and open-source source code editor. Prior to 8.9.6.1, the <GUIConfig name="commandLineInterpreter"> tag in config.xml is…
• CVE-2026-48770TRUNG BÌNH 5.0Notepad++ is a free and open-source source code editor. Prior to 8.9.6.1, a local process in the same interactive Windows session can send a…