high7.8
CVE-2022-32168
Notepad++ versions 8.4.1 and before are vulnerable to DLL hijacking where an attacker can replace the vulnerable dll (UxTheme.dll) with his own dll and run arb…
Impact
Notepad++ versions 8.4.1 and before are vulnerable to DLL hijacking where an attacker can replace the vulnerable dll (UxTheme.dll) with his own dll and run arbitrary code in the context of Notepad++.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Notepad-Plus-Plus | Notepad\+\+ | from 8.3 before 8.4.5 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/notepad-plus-plus/notepad-plus-plus/commit/85d7215d9b3e0d5a8433fc31aec4f2966821051e
- https://www.mend.io/vulnerability-database/CVE-2022-32168
- https://github.com/notepad-plus-plus/notepad-plus-plus/commit/85d7215d9b3e0d5a8433fc31aec4f2966821051e
- https://www.mend.io/vulnerability-database/CVE-2022-32168