Description (CNA)
Notepad++ versions 8.4.1 and before are vulnerable to DLL hijacking where an attacker can replace the vulnerable dll (UxTheme.dll) with his own dll and run arbitrary code in the context of Notepad++.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| notepad-plus-plus / notepad-plus-plus | affected v8.3 before unspecified; affected unspecified through v8.4.4 |
CWE
CWE-427
References
- https://www.mend.io/vulnerability-database/CVE-2022-32168
- https://github.com/notepad-plus-plus/notepad-plus-plus/commit/85d7215d9b3e0d5a8433fc31aec4f2966821051e
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.