CyberSecBulletin

Notepad++ Project vulnerabilities

We track 1 vulnerability in Notepad++ Project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on April 10, 2026.

1vulnerabilities
0critical
1high
0exploited
7.8average CVSS score

Latest Notepad++ Project vulnerabilities

  • 7.8 High severity

    Notepad++: Stack-based Buffer Overflow

    CVE-2026-5525Notepad++ Project

    A stack-based buffer overflow vulnerability exists in Notepad++ version 8.9.3 in the file drop handler component. When a user drags and drops a directory path of exactly 259 characters without a trailing backslash, the application appends a backslash and null