vulnerability

NotepadPlusPlus: Unspecified Security Vulnerability (CVE-2022-32168)

Severity
7
CVSS
(AV:L/AC:M/Au:N/C:C/I:C/A:C)
Published
Sep 28, 2022
Added
Mar 17, 2023
Modified
Jan 28, 2025

Description

Notepad++ versions 8.4.1 and before are vulnerable to DLL hijacking where an attacker can replace the vulnerable dll (UxTheme.dll) with his own dll and run arbitrary code in the context of Notepad++.

Solution

notepadplusplus-upgrade-8_4_5
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.