What the vulnerability does
01Description
Notepad++ versions 8.4.1 and before are vulnerable to DLL hijacking where an attacker can replace the vulnerable dll (UxTheme.dll) with his own dll and run arbitrary code in the context of Notepad++.
CVSS base score
—
Key dates
02Disclosure timeline
September 28, 2022
CVE published
May 21, 2025
Record updated
External resources
