CVE-2022-32168CWE-427
notepad-plus-plus - DLL Hijacking
High · published September 28, 2022
What it is
Notepad++ versions 8.4.1 and before are vulnerable to DLL hijacking where an attacker can replace the vulnerable dll (UxTheme.dll) with his own dll and run arbitrary code in the context of Notepad++.
The record
Technical detail
- CVSS v3.1
- 7.8 · HIGH
- Vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00750 · 54.5th percentile
- Weakness
- CWE-427 · Uncontrolled Search Path Element
- Published
- 2022-09-28T09:00Z
EPSS history
Timeline