Sploitus

31 exploited vulnerabilities in Notepad++

Vulnerabilities with publicly known exploits

Vendors
Notepad++ Team, Notepad++, Don Ho, Scintilla, Tabnine
With known exploits
31
Affected Don Ho Notepad\+\+ versions
= 6.6.9
Affected Notepad-plus-plus Notepad\+\+ versions
< 8.9.6, 8.9.6.1, 8.9.3, 6.5, 8.5.6, 7.7, 8.8.9, 8.9.6.4, 8.9.2, 8.4.3, 8.1
Affected Mh-nexus Hex Editor versions
= 0.9.5
Affected Notepad\+\+ versions
≤ 4.1.1
Affected Scintilla versions
= 1.73

Vulnerabilities with exploits

Highest CVSS first — 16 of these already have exploit code on Sploitus

CVE-2014-9456 1 exploit
CVSS 10.0 HIGH 2015-01-02FIX AVAILABLE
CVE-2025-56383 2 exploits
CVSS 8.4 HIGH 2025-09-26FIX AVAILABLE
CVE-2026-57233
CVSS 8.1 HIGH 2026-07-15FIX AVAILABLE
CVE-2026-54758
CVSS 7.8 HIGH 2026-07-15FIX AVAILABLE
CVE-2026-46710
CVSS 7.8 HIGH 2026-06-26FIX AVAILABLE
CVE-2026-52884
CVSS 7.8 HIGH 2026-05-30
CVE-2026-48800 4 exploits
CVSS 7.8 HIGH 2026-05-26
CVE-2026-48778 7 exploits
CVSS 7.8 HIGH 2026-05-26FIX AVAILABLE
CVE-2026-5525
CVSS 7.8 HIGH 2026-04-10FIX AVAILABLE
CVE-2023-47452
CVSS 7.8 HIGH 2023-11-30
CVE-2023-40031 1 exploit
CVSS 7.8 HIGH 2023-08-21FIX AVAILABLE
CVE-2019-16294 1 exploit
CVSS 7.8 HIGH 2019-09-14FIX AVAILABLE
CVE-2017-8803
CVSS 7.8 HIGH 2017-07-05FIX AVAILABLE
CVE-2025-15556 2 exploits
CVSS 7.7 HIGH 2025-12-09FIX AVAILABLE
CVE-2007-2666 1 exploit
CVSS 7.6 HIGH 2007-05-14FIX AVAILABLE
CVE-2026-52885 2 exploits
CVSS 7.5 HIGH 2026-06-26FIX AVAILABLE
CVE-2026-25926
CVSS 7.3 HIGH 2026-02-16FIX AVAILABLE
CVE-2025-49144 11 exploits
CVSS 7.3 HIGH 2025-06-21FIX AVAILABLE
CVE-2026-49144
CVSS 7.1 HIGH 2026-02-03
CVE-2026-3008 2 exploits
CVSS 6.6 MEDIUM 2026-04-27FIX AVAILABLE
CVE-2022-31901 1 exploit
CVSS 6.5 MEDIUM 2023-01-19
CVE-2022-31902 1 exploit
CVSS 5.5 MEDIUM 2023-02-01
CVE-2023-40036
CVSS 5.5 MEDIUM 2023-08-25FIX AVAILABLE
CVE-2023-40166
CVSS 5.5 MEDIUM 2023-08-21FIX AVAILABLE
CVE-2023-40164
CVSS 5.5 MEDIUM 2023-08-21FIX AVAILABLE
CVE-2026-71858
CVSS 5.4 MEDIUM 2026-08-17FIX AVAILABLE
CVE-2026-73250
CVSS 5.4 MEDIUM 2026-08-11FIX AVAILABLE
CVE-2023-6401 2 exploits
CVSS 7.8 HIGH 2023-11-30FIX AVAILABLE
CVE-2026-52886 1 exploit
CVSS 5.1 MEDIUM 2026-07-15FIX AVAILABLE
CVE-2026-48770 2 exploits
CVSS 5.0 MEDIUM 2026-05-26FIX AVAILABLE
CVE-2026-6539
CVSS 4.6 MEDIUM 2026-04-30FIX AVAILABLE