Notepad
Vendor:
First CVE: Jul 5, 2017 · Active for 9 years
21
Total CVEs
More Total CVEs than 94% of tracked products
4.2
Avg CVEs / Year
Higher CVE frequency than 86% of tracked products
6.9
Avg CVSS
Higher Avg CVSS than 39% of tracked products
4.8%
KEV Rate
Higher KEV Rate than 97% of tracked products
Trends Over Time
The number and severity of CVEs published that impact Notepad over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jul 5, 2017
9 years ago
Most Recent CVE
Jun 26, 2026
28 days ago
CVE Severity & Scoring
Notepad21 CVEs
38%
62%
All CVEs352,231 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local19 (90.5%)
Network2 (9.5%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low19 (90.5%)
High2 (9.5%)
Unknown0 (0.0%)
User Interaction
None3 (14.3%)
Unknown0 (0.0%)
Required18 (85.7%)
Privileges Required
Low5 (23.8%)
High0 (0.0%)
None16 (76.2%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (21 CVEs).
21 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2025-15556HIGH Notepad++ versions prior to 8.8.9, when using the WinGUp updater, contain an update integrity verification vulnerability where downloaded update metadata and installers are not cry | Feb 3, 2026 | 7.5 | 69 | YES | NO |
CVE-2026-48778HIGH Notepad++ is a free and open-source source code editor. Prior to 8.9.6.1, the <GUIConfig name="commandLineInterpreter"> tag in config.xml is read by NppXml::value() (Parameters.cpp | Jun 26, 2026 | 7.8 | 49 | NO | YES |
CVE-2019-16294HIGH SciLexer.dll in Scintilla in Notepad++ (x64) before 7.7 allows remote code execution or denial of service via Unicode characters in a crafted .ml file. | Sep 14, 2019 | 7.8 | 41 | NO | YES |
CVE-2026-52884HIGH Notepad++ is a free and open-source source code editor. In v8.9.6.1, isInTrustedDirectory() does NOT canonicalize the path before checking. It uses a prefix-based check (PathIsPref | Jun 26, 2026 | 7.8 | 37 | NO | NO |
CVE-2026-48800HIGH Notepad++ is a free and open-source source code editor. Prior to 8.9.6.1, the <Command> tag text content inside <UserDefinedCommands> in shortcuts.xml is read by NppXml::value(aNod | Jun 26, 2026 | 7.8 | 36 | NO | NO |
CVE-2026-46710HIGH Notepad++ is a free and open-source source code editor. From 8.9.4 until 8.9.6, Notepad++ contains a local privilege escalation vulnerability in the installer. During installation, | Jun 26, 2026 | 7.8 | 35 | NO | NO |
CVE-2026-52885MEDIUM Notepad++ is a free and open-source source code editor. Prior to 8.9.6.4, NppCommands.cpp checks the HMAC of the on-disk shortcuts.xml at the moment a user command fires (Time-of-C | Jun 26, 2026 | 6.3 | 32 | NO | NO |
CVE-2026-48770MEDIUM Notepad++ is a free and open-source source code editor. Prior to 8.9.6.1, a local process in the same interactive Windows session can send a malformed WM_COPYDATA message to Notepa | Jun 26, 2026 | 5.0 | 28 | NO | NO |
CVE-2026-5525HIGH A stack-based buffer overflow vulnerability exists in Notepad++ version 8.9.3 in the file drop handler component. When a user drags and drops a directory path of exactly 259 charac | Apr 10, 2026 | 7.8 | 26 | NO | NO |
CVE-2026-25926HIGH Notepad++ is a free and open-source source code editor. An Unsafe Search Path vulnerability (CWE-426) exists in versions prior to 8.9.2 when launching Windows Explorer without an a | Feb 19, 2026 | 7.3 | 26 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (21 CVEs).
CISA KEV
1 CVE
4.8% of CVEs· 97th percentile
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
2 CVEs
9.5% of CVEs· 89th percentile
Social Chatter
Signals from CVEs in this product scope (21 CVEs).
Media Mentions
Signals from CVEs in this product scope (21 CVEs).
Top CNAs Publishing CVEs For Notepad
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 8.9.6.1 | 1 | 7.8 | 0.2% | 0 | 0 |
| 8.9.3 | 2 | 6.1 | 0.2% | 0 | 0 |
| 6.5 | 1 | 7.8 | 0.5% | 0 | 0 |