CVE-2022-32168

published 2022-09-28

CVE-2022-32168: Notepad++ versions 8.4.1 and before are vulnerable to DLL hijacking where an attacker can replace the vulnerable dll (UxTheme.dll) with his own dll and run…

Priority P3 37 high 7.8 CVSS 3.1

AV L AC L PR N UI R S U C H I H A H

Notepad++ versions 8.4.1 and before are vulnerable to DLL hijacking where an attacker can replace the vulnerable dll (UxTheme.dll) with his own dll and run arbitrary code in the context of Notepad++.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
notepad-plus-plus	notepad	>= 8.3 < 8.4.5	8.4.5
notepad-plus-plus	notepad-plus-plus	unspecified – v8.4.4	—
notepad-plus-plus	notepad-plus-plus	>= v8.3 < unspecified	unspecified

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-427