CVE-2025-15556 is a critical update integrity verification vulnerability affecting Notepad++ versions prior to 8.8.9 when using the WinGUp updater. An attacker can intercept or redirect update traffic to deliver and execute malicious code, leading to arbitrary code execution with user privileges. This vulnerability has a CVSS score of 7.5 (HIGH) due to its network-based attack vector, high impact on confidentiality, integrity, and availability, and requires user interaction. Notably, this CVE is actively exploited in the wild, has a high FAUCET Risk Score of 99/100, and has garnered significant community discussion and media coverage, despite no public exploit code being available on platforms like Metasploit or ExploitDB.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 8.8.9CPE matchmatch criteria | cpe:2.3:a:notepad-plus-plus:notepad\+\+:*:*:*:*:*:*:*:* |
CVSS version used by this source: 4.0
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.4 Bluesky, 0.2 Mastodon, and 0.1 GitHub mentions.
The average CVE in this peer group has 0.6 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.