CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2026-02-03
Notepad++ WinGUp Updater Lack of Update Integrity Verification Remote Code Execution Vulnerability (CVE-2025-15556)
[Affected Scope] Notepad++ versions prior to 8.8.9 utilizing the WinGUp updater component.
[Impact] Attackers capable of intercepting or redirecting update traffic can bypass verification to deliver and execute arbitrary malicious installers under the user's privilege context.
[Mitigation] Immediately upgrade Notepad++ to version 8.8.9 or higher, or block updater outbound traffic as a temporary workaround.