en
Notepad++ is a free, open-source text and source code editor provided by the Notepad++ project for Microsoft Windows. It supports document editing, syntax highlighting, plugins, macros, sessions, and related developer workflows. It is primarily installed as a desktop application for individual users and organizations.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
As of 10/21/2026, notepad-plus-plus recorded 11 security vulnerabilities in the last 90 days across 1 products, including 6 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, notepad-plus-plus had the most security vulnerabilities in the notepad-plus-plus ecosystem, with 11 vulnerabilities—approximately 100% of the provider's total vulnerabilities during this period.
CVE-2026-85995Notepad++: Authenticode verification bypass allows modified updater executionCVE-2026-86056Notepad++: Null pointer dereference in NPPM_SAVESESSION message handler causes crash (DoS)CVE-2026-77605Notepad++ “Run by system” executes *.txt.cmd when user selected *.txt (target confusion → command execution)CVE-2026-86054Notepad++: Stack Buffer Overflow in `NppParameters::writeSession` via overlong session pathCVE-2026-85288Notepad++: Shortcuts.xml macro HMAC bypass still reachable via the "Run a Macro Multiple Times" dialog32 Results | Page 1 of 4
| SeverityMedium |
| SeverityHigh |
| SeverityHigh |
| SeverityMedium |
| SeverityHigh |
| SeverityHigh |
| SeverityMedium |
| SeverityMedium |
| SeverityHigh |