VULNERABILITY INTELLIGENCE

CVE-2022-32168

CVSS score7.8 HIGH
EPSS probability0.75%
CISA KEVNot currently listed
Published2022-09-28
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

Notepad++ versions 8.4.1 and before are vulnerable to DLL hijacking where an attacker can replace the vulnerable dll (UxTheme.dll) with his own dll and run arbitrary code in the context of Notepad++.

Weakness classification

  • CWE-427: Uncontrolled Search Path Element

Primary references