Unrated

notepad-plus-plus - DLL Hijacking

CVE-2022-32168 First seen on SecPulse Sep 28, 2022

Original description The description as published by the source.

Notepad++ versions 8.4.1 and before are vulnerable to DLL hijacking where an attacker can replace the vulnerable dll (UxTheme.dll) with his own dll and run arbitrary code in the context of Notepad++.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
patch github.com
web mend.io

Key facts

Severity: Unrated
Published: Sep 28, 2022
First seen on SecPulse: Sep 28, 2022
CWE: CWE-427

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 23:43