Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 4 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 402,159All CVEsplus 19,142 rejected
- 204Last 24 hours3,232 in the last 7 days
- 16,874Last 30 days1,558 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 13 | 6 | 0 | 0 | 19 | 25 |
| 2025 | 0 | 1 | 0 | 0 | 0 | 1 | 6 |
| 2024 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| 2023 | 0 | 1 | 3 | 0 | 0 | 4 | 5 |
| 2022 | 0 | 1 | 0 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-85995 | Notepad++: Authenticode verification bypass allows modified updater executionnotepad-plus-plus · notepad-plus-plus | High7.3 |
| CVE-2026-86056 | Notepad++: Null pointer dereference in NPPM_SAVESESSION message handler causes crash (DoS)Public exploitnotepad-plus-plus · notepad-plus-plus | Medium5.5 |
| CVE-2026-77605 | Notepad++ “Run by system” executes *.txt.cmd when user selected *.txt (target confusion → command execution)Public exploitnotepad-plus-plus · notepad-plus-plus | High7.8 |
| CVE-2026-86054 | Notepad++: Stack Buffer Overflow in `NppParameters::writeSession` via overlong session pathPublic exploitnotepad-plus-plus · notepad-plus-plus | High7.8 |
| CVE-2026-85288 | Notepad++: Shortcuts.xml macro HMAC bypass still reachable via the "Run a Macro Multiple Times" dialogPublic exploitnotepad-plus-plus · notepad-plus-plus | Medium6.7 |
| CVE-2026-85279 | Notepad++: Stack Buffer Overflow in Plugin Lexer Loading via Unchecked GetLexerCount() Return ValuePublic exploitnotepad-plus-plus · notepad-plus-plus | High8.6 |
| CVE-2026-57233 | Notepad++: Path Traversal (Zip Slip) in WinGup Plugin ExtractionPublic exploitnotepad-plus-plus · notepad-plus-plus | High8.1 |
| CVE-2026-52886 | Notepad++: session.xml backupFilePath starts_with BypassPublic exploitnotepad-plus-plus · notepad-plus-plus | Medium5.1 |
| CVE-2026-71858 | Notepad++: shortcuts.xml Macro HMAC Bypass Enables Conditional Elevated Command ExecutionPublic exploitnotepad-plus-plus · notepad-plus-plus | Medium5.4 |
| CVE-2026-54758 | Notepad++: Stack Buffer Overflow in expandNppEnvironmentStrsnotepad-plus-plus · notepad-plus-plus | High7.8 |
| CVE-2026-73250 | Notepad++: Install-time PowerShell command injection through installation pathnotepad-plus-plus · notepad-plus-plus | Medium5.4 |
| CVE-2026-48770 | Notepad++ WM_COPYDATA COPYDATA_FULL_CMDLINE local DoS crashPublic exploitnotepad-plus-plus · notepad-plus-plus | Medium5.0 |
| CVE-2026-48778 | Notepad++: Arbitrary Code Execution via config.xml commandLineInterpreterPublic exploitnotepad-plus-plus · notepad-plus-plus | High7.8 |
| CVE-2026-52885 | Notepad++ TOCTOU: HMAC Checks Disk, Executes from MemoryPublic exploitnotepad-plus-plus · notepad-plus-plus | High7.5 |
| CVE-2026-46710 | Notepad++: Privilege Escalation in the Installer via Uncontrolled Executable Search Pathnotepad-plus-plus · notepad-plus-plus | High7.5 |
| CVE-2026-48800 | Notepad++: Arbitrary Code Execution via shortcuts.xml UserCommand InjectionPublic exploitnotepad-plus-plus · notepad-plus-plus | High7.8 |
| CVE-2026-52884 | Notepad++: CVE-2026-48800 Bypassnotepad-plus-plus · notepad-plus-plus | High7.8 |
| CVE-2026-25926 | Notepad++ has an Untrusted Search Pathnotepad-plus-plus · notepad-plus-plus | High7.3 |
| CVE-2025-15556 | Notepad++ < 8.8.9 WinGUp Updater Lacks Update Integrity VerificationExploitedPublic exploitnotepad-plus-plus · notepad-plus-plus | High7.7 |
| CVE-2025-49144 | Notepad++ Privilege Escalation in Installer via Uncontrolled Executable Search Pathnotepad-plus-plus · notepad-plus-plus | High7.3 |
| CVE-2023-40166 | Notepad++ heap buffer read overflow in FileManager::detectLanguageFromTextBeginingPublic exploitnotepad-plus-plus · notepad-plus-plus | Medium5.5 |
| CVE-2023-40164 | Notepad++ global buffer read overflow in nsCodingStateMachine::NextStatePublic exploitnotepad-plus-plus · notepad-plus-plus | Medium5.5 |
| CVE-2023-40036 | Notepad++ global buffer read overflow in CharDistributionAnalysis::HandleOneCharnotepad-plus-plus · notepad-plus-plus | Medium5.5 |
| CVE-2023-40031 | Notepad++ vulnerable to heap buffer write overflow in Utf8_16_Read::convertPublic exploitnotepad-plus-plus · notepad-plus-plus | High7.8 |
| CVE-2022-32168 | notepad-plus-plus - DLL Hijackingnotepad-plus-plus · notepad-plus-plus | High7.8 |