Security
1 min read0 views
CVE-2025-15556: Notepad++ < 8.8.9 WinGUp Updater Lacks Update Integrity Verification (Update: proof of concept on GitHub published)
Update: proof of concept on GitHub published. Notepad++ versions before 8.8.9 are affected when they use the WinGUp updater. An attacker who can intercept or redirect update traffic could trick the updater into running a malicious installer, allowing arbitrary code to run with the user's privileges.
Reading Level🟢Beginner
Listen to this article
Update: proof of concept on GitHub published. Notepad++ versions before 8.8.9 are affected when they use the WinGUp updater. An attacker who can intercept or redirect update traffic could trick the updater into running a malicious installer, allowing arbitrary code to run with the user's privileges.
Original Source
cve.now CISA KEVLike this article
Share this article
Share:
Related Articles
CVE-2025-22224: VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write. (Update: proof of concept on GitHub published)
1 min read·5h ago
CVE-2020-9715: Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier… (Update: proof of concept on GitHub published)
1 min read·5h ago
CVE-2023-26369: [Google Project Zero] Adobe Acrobat DC OOBW 0-day actively exploited in the wild (Update: proof of concept on GitHub published)
1 min read·5h ago