https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-86056.htmlhttps://patchthecve.com/cve/CVE-2026-86056.htmlWed, 23 Sep 2026 18:28:25 +0000MEDIUM 5.5: Notepad++ is a free and open-source source code editor. Prior to 8.9.8, the NPPM_SAVESESSION handler in PowerEditor/src/NppBigSwitch.cpp converts lParam to a sessionInfo pointer and dereferences its nbFile, files, and sessionFilePathName members without checking for null. A process running at the sahttps://patchthecve.com/cve/CVE-2026-86054.htmlhttps://patchthecve.com/cve/CVE-2026-86054.htmlMon, 28 Sep 2026 18:17:25 +0000HIGH 7.8: Notepad++ is a free and open-source source code editor. Prior to 8.9.8, Notepad++ contains a stack buffer overflow in NppParameters::writeSession in PowerEditor/src/Parameters.cpp because it copies a session path derived from -settingsDir= into backupPathName[MAX_PATH] with unbounded wcscpy and appehttps://patchthecve.com/cve/CVE-2026-85995.htmlhttps://patchthecve.com/cve/CVE-2026-85995.htmlWed, 23 Sep 2026 18:28:25 +0000HIGH 7.3: Notepad++ is a free and open-source source code editor. From 8.9.7 until 8.9.8, the Notepad++ updater and signature verification path can accept a modified GUP.exe file whose embedded certificate metadata remains present even though its Authenticode digest is invalid. An attacker who can replace or https://patchthecve.com/cve/CVE-2026-85288.htmlhttps://patchthecve.com/cve/CVE-2026-85288.htmlSat, 26 Sep 2026 00:16:37 +0000MEDIUM 6.7: Notepad++ is a free and open-source source code editor. Prior to 8.9.8, Notepad++ incompletely enforces shortcuts.xml HMAC validation because WM_MACRODLGRUNMACRO, the Run a Macro Multiple Times entry point, calls macroPlayback() without the validation used by command(). A tampered shortcuts.xml macrhttps://patchthecve.com/cve/CVE-2026-85279.htmlhttps://patchthecve.com/cve/CVE-2026-85279.htmlWed, 23 Sep 2026 18:28:25 +0000HIGH 8.6: Notepad++ is a free and open-source source code editor. Prior to 8.9.8, Notepad++ contains a stack buffer overflow in PluginsManager::loadPluginFromPath in PowerEditor/src/MISC/PluginsManager/PluginsManager.cpp because the plugin-supplied GetLexerCount() result controls a loop that writes to containhttps://patchthecve.com/cve/CVE-2026-77605.htmlhttps://patchthecve.com/cve/CVE-2026-77605.htmlMon, 28 Sep 2026 18:17:25 +0000HIGH 7.8: Notepad++ is a free and open-source source code editor. Prior to 8.9.8, the Folder as Workspace Run by system action in Notepad++ can resolve a different sibling file than the file selected by the user. When an attacker places a command script whose name is the selected text-file path with .cmd appehttps://patchthecve.com/cve/CVE-2026-42214.htmlhttps://patchthecve.com/cve/CVE-2026-42214.htmlMon, 26 Oct 2026 20:10:00 +0000HIGH 7.8: Notepad Next is a cross-platform, reimplementation of Notepad++. Prior to version 0.14, NotepadNext's detectLanguageFromExtension() function interpolates a file's extension directly into a Lua script without sanitization. An attacker can craft a filename whose extension contains Lua code, which exechttps://patchthecve.com/cve/CVE-2026-5525.htmlhttps://patchthecve.com/cve/CVE-2026-5525.htmlMon, 26 Oct 2026 21:10:00 +0000MEDIUM 6.0: A stack-based buffer overflow vulnerability exists in Notepad++ version 8.9.3 in the file drop handler component. When a user drags and drops a directory path of exactly 259 characters without a trailing backslash, the application appends a backslash and null terminator without proper bounds checkin