WID-SEC-W-2023-3040

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Notepad++: Mehrere Schwachstellen

view advisory published 2023-11-30

Ein lokaler Angreifer kann mehrere Schwachstellen in Notepad++ ausnutzen, um seine Privilegien zu erhöhen oder um einen unspezifischen Angriff durchzuführen.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2023-47452UShigh7.8—
An Untrusted search path vulnerability in notepad++ 6.5 allows local users to gain escalated privileges through the msimg32.dll file in the current working directory.
CVE-2023-6401UShigh7.8Exploit
A vulnerability classified as problematic was found in NotePad++ up to 8.1. Affected by this vulnerability is an unknown functionality of the file dbghelp.exe. The manipulation lea…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan