CVE-2025-56383

HIGH EPSS 18.7%
Published Sep 26, 20259mo ago · Modified Jun 17, 20262w ago
8.4 CVSS 3.1
High
Find Similar
Published Sep 26, 2025 9mo ago
Last Modified Jun 17, 2026 2w ago

Description

Notepad++ v8.8.3 has a DLL hijacking vulnerability, which can replace the original DLL file to execute malicious code. NOTE: this is disputed by multiple parties because the behavior only occurs when a user installs the product into a directory tree that allows write access by arbitrary unprivileged users.

CVSS Details

Base Score
8.4
Exploitability
2.5
Impact
5.9
Vector string
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality High
Integrity High
Availability High

Threat Intelligence

EPSS Exploit Probability
18.7% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-427

References 5

  • github.com https://github.com/notepad-plus-plus/notepad-plus-plus
  • github.com https://github.com/zer0t0/CVE-2025-56383-Proof-of-Concept
  • github.com https://github.com/zer0t0/CVE-2025-56383-Proof-of-Concept/issues/1
  • vicarius.io https://www.vicarius.io/vsociety/posts/cve-2025-56383-detect-notepad-vulnerability
  • vicarius.io https://www.vicarius.io/vsociety/posts/cve-2025-56383-mitigate-notepad-vulnerability

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.