CVE-2022-32168

Notepad++ versions 8.4.1 and before are vulnerable to DLL hijacking where an attacker can replace the vulnerable dll (UxTheme.dll) with his own dll and run arbitrary code in the context of Notepad++.

Score

CVSS 3.1 7.8 High

Status

Modified - vulnerabilitylab@mend.io

Published

2022-09-28

Last modified

2025-05-21

Weaknesses

CWE-427

Affected products

• Notepad-plus-plus (Notepad-plus-plus)
• Notepad++ (Notepad-plus-plus)

References

• https://github.com/notepad-plus-plus/notepad-plus-plus/commit/85d7215d9b3e0d5a8433fc31aec4f2966821051e
• https://www.mend.io/vulnerability-database/CVE-2022-32168