{"cve_id":"CVE-2025-15556","summary":"Notepad++ versions prior to 8.8.9, when using the WinGUp updater, contain an update integrity verification vulnerability where downloaded update metadata and installers are not cryptographically verified. An attacker able to intercept or redirect update traffic can cause the updater to download and execute an attacker-controlled installer, resulting in arbitrary code execution with the privileges of the user.","cvss":7.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.5,"epss":0.05332,"ranking_epss":0.90023,"kev":true,"propose_action":"Notepad++ when using the WinGUp updater, contains a download of code without integrity check vulnerability that could allow an attacker to intercept or redirect update traffic to download and execute an attacker-controlled installer. This could lead to arbitrary code execution with the privileges of the user.","ransomware_campaign":"Unknown","references":["https://community.notepad-plus-plus.org/topic/27298/notepad-v8-8-9-vulnerability-fix","https://github.com/notepad-plus-plus/notepad-plus-plus/commit/bcf2aa68ef414338d717e20e059459570ed6c5ab","https://github.com/notepad-plus-plus/wingup/commit/ce0037549995ed0396cc363544d14b3425614fdb","https://notepad-plus-plus.org/news/hijacked-incident-info-update/","https://www.vulncheck.com/advisories/notepad-plus-plus-wingup-updater-lacks-update-integrity-verification","https://notepad-plus-plus.org//news//clarification-security-incident/","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-15556"],"published_time":"2026-02-03T01:15:57","cpes":["cpe:2.3:a:notepad-plus-plus:notepad++:1.0","cpe:2.3:a:notepad-plus-plus:notepad++:1.1","cpe:2.3:a:notepad-plus-plus:notepad++:1.2","cpe:2.3:a:notepad-plus-plus:notepad++:1.3","cpe:2.3:a:notepad-plus-plus:notepad++:1.4","cpe:2.3:a:notepad-plus-plus:notepad++:1.5","cpe:2.3:a:notepad-plus-plus:notepad++:1.6","cpe:2.3:a:notepad-plus-plus:notepad++:1.7","cpe:2.3:a:notepad-plus-plus:notepad++:1.8","cpe:2.3:a:notepad-plus-plus:notepad++:1.9","cpe:2.3:a:notepad-plus-plus:notepad++:2.0","cpe:2.3:a:notepad-plus-plus:notepad++:2.1","cpe:2.3:a:notepad-plus-plus:notepad++:2.2","cpe:2.3:a:notepad-plus-plus:notepad++:2.3","cpe:2.3:a:notepad-plus-plus:notepad++:2.4","cpe:2.3:a:notepad-plus-plus:notepad++:2.6","cpe:2.3:a:notepad-plus-plus:notepad++:2.7","cpe:2.3:a:notepad-plus-plus:notepad++:2.8","cpe:2.3:a:notepad-plus-plus:notepad++:2.9","cpe:2.3:a:notepad-plus-plus:notepad++:3.0","cpe:2.3:a:notepad-plus-plus:notepad++:3.1","cpe:2.3:a:notepad-plus-plus:notepad++:3.2","cpe:2.3:a:notepad-plus-plus:notepad++:3.3","cpe:2.3:a:notepad-plus-plus:notepad++:3.4","cpe:2.3:a:notepad-plus-plus:notepad++:3.5","cpe:2.3:a:notepad-plus-plus:notepad++:3.6","cpe:2.3:a:notepad-plus-plus:notepad++:3.7","cpe:2.3:a:notepad-plus-plus:notepad++:3.8","cpe:2.3:a:notepad-plus-plus:notepad++:3.9","cpe:2.3:a:notepad-plus-plus:notepad++:4.0","cpe:2.3:a:notepad-plus-plus:notepad++:4.0.1","cpe:2.3:a:notepad-plus-plus:notepad++:4.0.2","cpe:2.3:a:notepad-plus-plus:notepad++:4.1","cpe:2.3:a:notepad-plus-plus:notepad++:4.1.1","cpe:2.3:a:notepad-plus-plus:notepad++:4.1.2","cpe:2.3:a:notepad-plus-plus:notepad++:4.2.1","cpe:2.3:a:notepad-plus-plus:notepad++:4.2.2","cpe:2.3:a:notepad-plus-plus:notepad++:4.3","cpe:2.3:a:notepad-plus-plus:notepad++:4.4","cpe:2.3:a:notepad-plus-plus:notepad++:4.5","cpe:2.3:a:notepad-plus-plus:notepad++:4.6","cpe:2.3:a:notepad-plus-plus:notepad++:4.7","cpe:2.3:a:notepad-plus-plus:notepad++:4.7.1","cpe:2.3:a:notepad-plus-plus:notepad++:4.7.2","cpe:2.3:a:notepad-plus-plus:notepad++:4.7.3","cpe:2.3:a:notepad-plus-plus:notepad++:4.7.5","cpe:2.3:a:notepad-plus-plus:notepad++:4.8","cpe:2.3:a:notepad-plus-plus:notepad++:4.8.1","cpe:2.3:a:notepad-plus-plus:notepad++:4.8.2","cpe:2.3:a:notepad-plus-plus:notepad++:4.8.5","cpe:2.3:a:notepad-plus-plus:notepad++:4.9","cpe:2.3:a:notepad-plus-plus:notepad++:4.9.1","cpe:2.3:a:notepad-plus-plus:notepad++:4.9.2","cpe:2.3:a:notepad-plus-plus:notepad++:5.0","cpe:2.3:a:notepad-plus-plus:notepad++:5.0.1","cpe:2.3:a:notepad-plus-plus:notepad++:5.0.2","cpe:2.3:a:notepad-plus-plus:notepad++:5.0.3","cpe:2.3:a:notepad-plus-plus:notepad++:5.1","cpe:2.3:a:notepad-plus-plus:notepad++:5.1.1","cpe:2.3:a:notepad-plus-plus:notepad++:5.1.2","cpe:2.3:a:notepad-plus-plus:notepad++:5.1.3","cpe:2.3:a:notepad-plus-plus:notepad++:5.1.4","cpe:2.3:a:notepad-plus-plus:notepad++:5.2","cpe:2.3:a:notepad-plus-plus:notepad++:5.3","cpe:2.3:a:notepad-plus-plus:notepad++:5.3.1","cpe:2.3:a:notepad-plus-plus:notepad++:5.4","cpe:2.3:a:notepad-plus-plus:notepad++:5.4.1","cpe:2.3:a:notepad-plus-plus:notepad++:5.4.2","cpe:2.3:a:notepad-plus-plus:notepad++:5.4.3","cpe:2.3:a:notepad-plus-plus:notepad++:5.4.4","cpe:2.3:a:notepad-plus-plus:notepad++:5.4.5","cpe:2.3:a:notepad-plus-plus:notepad++:5.5","cpe:2.3:a:notepad-plus-plus:notepad++:5.5.1","cpe:2.3:a:notepad-plus-plus:notepad++:5.6","cpe:2.3:a:notepad-plus-plus:notepad++:5.6.1","cpe:2.3:a:notepad-plus-plus:notepad++:5.6.2","cpe:2.3:a:notepad-plus-plus:notepad++:5.6.3","cpe:2.3:a:notepad-plus-plus:notepad++:5.6.4","cpe:2.3:a:notepad-plus-plus:notepad++:5.6.5","cpe:2.3:a:notepad-plus-plus:notepad++:5.6.6","cpe:2.3:a:notepad-plus-plus:notepad++:5.6.7","cpe:2.3:a:notepad-plus-plus:notepad++:5.6.8","cpe:2.3:a:notepad-plus-plus:notepad++:5.7","cpe:2.3:a:notepad-plus-plus:notepad++:5.8","cpe:2.3:a:notepad-plus-plus:notepad++:5.8.1","cpe:2.3:a:notepad-plus-plus:notepad++:5.8.2","cpe:2.3:a:notepad-plus-plus:notepad++:5.8.3","cpe:2.3:a:notepad-plus-plus:notepad++:5.8.4","cpe:2.3:a:notepad-plus-plus:notepad++:5.8.5","cpe:2.3:a:notepad-plus-plus:notepad++:5.8.6","cpe:2.3:a:notepad-plus-plus:notepad++:5.8.7","cpe:2.3:a:notepad-plus-plus:notepad++:5.9","cpe:2.3:a:notepad-plus-plus:notepad++:5.9.1","cpe:2.3:a:notepad-plus-plus:notepad++:5.9.2","cpe:2.3:a:notepad-plus-plus:notepad++:5.9.3","cpe:2.3:a:notepad-plus-plus:notepad++:5.9.4","cpe:2.3:a:notepad-plus-plus:notepad++:5.9.5","cpe:2.3:a:notepad-plus-plus:notepad++:5.9.6","cpe:2.3:a:notepad-plus-plus:notepad++:5.9.6.1","cpe:2.3:a:notepad-plus-plus:notepad++:5.9.6.2","cpe:2.3:a:notepad-plus-plus:notepad++:5.9.7","cpe:2.3:a:notepad-plus-plus:notepad++:5.9.8","cpe:2.3:a:notepad-plus-plus:notepad++:6.0","cpe:2.3:a:notepad-plus-plus:notepad++:6.1","cpe:2.3:a:notepad-plus-plus:notepad++:6.1.1","cpe:2.3:a:notepad-plus-plus:notepad++:6.1.2","cpe:2.3:a:notepad-plus-plus:notepad++:6.1.3","cpe:2.3:a:notepad-plus-plus:notepad++:6.1.4","cpe:2.3:a:notepad-plus-plus:notepad++:6.1.5","cpe:2.3:a:notepad-plus-plus:notepad++:6.1.6","cpe:2.3:a:notepad-plus-plus:notepad++:6.1.7","cpe:2.3:a:notepad-plus-plus:notepad++:6.1.8","cpe:2.3:a:notepad-plus-plus:notepad++:6.2","cpe:2.3:a:notepad-plus-plus:notepad++:6.2.1","cpe:2.3:a:notepad-plus-plus:notepad++:6.2.2","cpe:2.3:a:notepad-plus-plus:notepad++:6.2.3","cpe:2.3:a:notepad-plus-plus:notepad++:6.3","cpe:2.3:a:notepad-plus-plus:notepad++:6.3.1","cpe:2.3:a:notepad-plus-plus:notepad++:6.3.2","cpe:2.3:a:notepad-plus-plus:notepad++:6.3.3","cpe:2.3:a:notepad-plus-plus:notepad++:6.4","cpe:2.3:a:notepad-plus-plus:notepad++:6.4.1","cpe:2.3:a:notepad-plus-plus:notepad++:6.4.2","cpe:2.3:a:notepad-plus-plus:notepad++:6.4.3","cpe:2.3:a:notepad-plus-plus:notepad++:6.4.4","cpe:2.3:a:notepad-plus-plus:notepad++:6.4.5","cpe:2.3:a:notepad-plus-plus:notepad++:6.5","cpe:2.3:a:notepad-plus-plus:notepad++:6.5.1","cpe:2.3:a:notepad-plus-plus:notepad++:6.5.2","cpe:2.3:a:notepad-plus-plus:notepad++:6.5.3","cpe:2.3:a:notepad-plus-plus:notepad++:6.5.4","cpe:2.3:a:notepad-plus-plus:notepad++:6.5.5","cpe:2.3:a:notepad-plus-plus:notepad++:6.6","cpe:2.3:a:notepad-plus-plus:notepad++:6.6.1","cpe:2.3:a:notepad-plus-plus:notepad++:6.6.2","cpe:2.3:a:notepad-plus-plus:notepad++:6.6.3","cpe:2.3:a:notepad-plus-plus:notepad++:6.6.4","cpe:2.3:a:notepad-plus-plus:notepad++:6.6.6","cpe:2.3:a:notepad-plus-plus:notepad++:6.6.7","cpe:2.3:a:notepad-plus-plus:notepad++:6.6.8","cpe:2.3:a:notepad-plus-plus:notepad++:6.6.9","cpe:2.3:a:notepad-plus-plus:notepad++:6.7","cpe:2.3:a:notepad-plus-plus:notepad++:6.7.1","cpe:2.3:a:notepad-plus-plus:notepad++:6.7.2","cpe:2.3:a:notepad-plus-plus:notepad++:6.7.3","cpe:2.3:a:notepad-plus-plus:notepad++:6.7.4","cpe:2.3:a:notepad-plus-plus:notepad++:6.7.5","cpe:2.3:a:notepad-plus-plus:notepad++:6.7.6","cpe:2.3:a:notepad-plus-plus:notepad++:6.7.7","cpe:2.3:a:notepad-plus-plus:notepad++:6.7.8","cpe:2.3:a:notepad-plus-plus:notepad++:6.7.8.1","cpe:2.3:a:notepad-plus-plus:notepad++:6.7.8.2","cpe:2.3:a:notepad-plus-plus:notepad++:6.7.9","cpe:2.3:a:notepad-plus-plus:notepad++:6.7.9.1","cpe:2.3:a:notepad-plus-plus:notepad++:6.7.9.2","cpe:2.3:a:notepad-plus-plus:notepad++:6.8","cpe:2.3:a:notepad-plus-plus:notepad++:6.8.1","cpe:2.3:a:notepad-plus-plus:notepad++:6.8.2","cpe:2.3:a:notepad-plus-plus:notepad++:6.8.3","cpe:2.3:a:notepad-plus-plus:notepad++:6.8.4","cpe:2.3:a:notepad-plus-plus:notepad++:6.8.5","cpe:2.3:a:notepad-plus-plus:notepad++:6.8.6","cpe:2.3:a:notepad-plus-plus:notepad++:6.8.7","cpe:2.3:a:notepad-plus-plus:notepad++:6.8.8","cpe:2.3:a:notepad-plus-plus:notepad++:6.8.9","cpe:2.3:a:notepad-plus-plus:notepad++:6.9","cpe:2.3:a:notepad-plus-plus:notepad++:6.9.1","cpe:2.3:a:notepad-plus-plus:notepad++:6.9.2","cpe:2.3:a:notepad-plus-plus:notepad++:7","cpe:2.3:a:notepad-plus-plus:notepad++:7.1","cpe:2.3:a:notepad-plus-plus:notepad++:7.2","cpe:2.3:a:notepad-plus-plus:notepad++:7.2.1","cpe:2.3:a:notepad-plus-plus:notepad++:7.2.2","cpe:2.3:a:notepad-plus-plus:notepad++:7.3","cpe:2.3:a:notepad-plus-plus:notepad++:7.3.1","cpe:2.3:a:notepad-plus-plus:notepad++:7.3.2","cpe:2.3:a:notepad-plus-plus:notepad++:7.3.3","cpe:2.3:a:notepad-plus-plus:notepad++:7.4","cpe:2.3:a:notepad-plus-plus:notepad++:7.4.1","cpe:2.3:a:notepad-plus-plus:notepad++:7.4.2","cpe:2.3:a:notepad-plus-plus:notepad++:7.5","cpe:2.3:a:notepad-plus-plus:notepad++:7.5.1","cpe:2.3:a:notepad-plus-plus:notepad++:7.5.2","cpe:2.3:a:notepad-plus-plus:notepad++:7.5.3","cpe:2.3:a:notepad-plus-plus:notepad++:7.5.4","cpe:2.3:a:notepad-plus-plus:notepad++:7.5.5","cpe:2.3:a:notepad-plus-plus:notepad++:7.5.6","cpe:2.3:a:notepad-plus-plus:notepad++:7.5.7","cpe:2.3:a:notepad-plus-plus:notepad++:7.5.8","cpe:2.3:a:notepad-plus-plus:notepad++:7.5.9","cpe:2.3:a:notepad-plus-plus:notepad++:7.6","cpe:2.3:a:notepad-plus-plus:notepad++:7.6.1","cpe:2.3:a:notepad-plus-plus:notepad++:7.6.2","cpe:2.3:a:notepad-plus-plus:notepad++:7.6.3","cpe:2.3:a:notepad-plus-plus:notepad++:7.6.4","cpe:2.3:a:notepad-plus-plus:notepad++:7.6.5","cpe:2.3:a:notepad-plus-plus:notepad++:7.6.6","cpe:2.3:a:notepad-plus-plus:notepad++:7.7","cpe:2.3:a:notepad-plus-plus:notepad++:7.7.1","cpe:2.3:a:notepad-plus-plus:notepad++:7.8","cpe:2.3:a:notepad-plus-plus:notepad++:7.8.1","cpe:2.3:a:notepad-plus-plus:notepad++:7.8.2","cpe:2.3:a:notepad-plus-plus:notepad++:7.8.3","cpe:2.3:a:notepad-plus-plus:notepad++:7.8.4","cpe:2.3:a:notepad-plus-plus:notepad++:7.8.5","cpe:2.3:a:notepad-plus-plus:notepad++:7.8.6","cpe:2.3:a:notepad-plus-plus:notepad++:7.8.7","cpe:2.3:a:notepad-plus-plus:notepad++:7.8.8","cpe:2.3:a:notepad-plus-plus:notepad++:7.8.9","cpe:2.3:a:notepad-plus-plus:notepad++:7.9","cpe:2.3:a:notepad-plus-plus:notepad++:7.9.1","cpe:2.3:a:notepad-plus-plus:notepad++:7.9.2","cpe:2.3:a:notepad-plus-plus:notepad++:7.9.3","cpe:2.3:a:notepad-plus-plus:notepad++:7.9.4","cpe:2.3:a:notepad-plus-plus:notepad++:7.9.5","cpe:2.3:a:notepad-plus-plus:notepad++:8","cpe:2.3:a:notepad-plus-plus:notepad++:8.1","cpe:2.3:a:notepad-plus-plus:notepad++:8.1.1","cpe:2.3:a:notepad-plus-plus:notepad++:8.1.2","cpe:2.3:a:notepad-plus-plus:notepad++:8.1.3","cpe:2.3:a:notepad-plus-plus:notepad++:8.1.4","cpe:2.3:a:notepad-plus-plus:notepad++:8.1.5","cpe:2.3:a:notepad-plus-plus:notepad++:8.1.6","cpe:2.3:a:notepad-plus-plus:notepad++:8.1.7","cpe:2.3:a:notepad-plus-plus:notepad++:8.1.8","cpe:2.3:a:notepad-plus-plus:notepad++:8.1.9","cpe:2.3:a:notepad-plus-plus:notepad++:8.1.9.1","cpe:2.3:a:notepad-plus-plus:notepad++:8.1.9.2","cpe:2.3:a:notepad-plus-plus:notepad++:8.1.9.3","cpe:2.3:a:notepad-plus-plus:notepad++:8.2","cpe:2.3:a:notepad-plus-plus:notepad++:8.2.1","cpe:2.3:a:notepad-plus-plus:notepad++:8.3","cpe:2.3:a:notepad-plus-plus:notepad++:8.3.1","cpe:2.3:a:notepad-plus-plus:notepad++:8.3.2","cpe:2.3:a:notepad-plus-plus:notepad++:8.3.3","cpe:2.3:a:notepad-plus-plus:notepad++:8.4","cpe:2.3:a:notepad-plus-plus:notepad++:8.4.1","cpe:2.3:a:notepad-plus-plus:notepad++:8.4.2","cpe:2.3:a:notepad-plus-plus:notepad++:8.4.3","cpe:2.3:a:notepad-plus-plus:notepad++:8.4.4","cpe:2.3:a:notepad-plus-plus:notepad++:8.4.5","cpe:2.3:a:notepad-plus-plus:notepad++:8.4.6","cpe:2.3:a:notepad-plus-plus:notepad++:8.4.7","cpe:2.3:a:notepad-plus-plus:notepad++:8.4.8","cpe:2.3:a:notepad-plus-plus:notepad++:8.4.9","cpe:2.3:a:notepad-plus-plus:notepad++:8.5","cpe:2.3:a:notepad-plus-plus:notepad++:8.5.1","cpe:2.3:a:notepad-plus-plus:notepad++:8.5.2","cpe:2.3:a:notepad-plus-plus:notepad++:8.5.3","cpe:2.3:a:notepad-plus-plus:notepad++:8.5.4","cpe:2.3:a:notepad-plus-plus:notepad++:8.5.5","cpe:2.3:a:notepad-plus-plus:notepad++:8.5.6","cpe:2.3:a:notepad-plus-plus:notepad++:8.5.7","cpe:2.3:a:notepad-plus-plus:notepad++:8.5.8","cpe:2.3:a:notepad-plus-plus:notepad++:8.6","cpe:2.3:a:notepad-plus-plus:notepad++:8.6.1","cpe:2.3:a:notepad-plus-plus:notepad++:8.6.2","cpe:2.3:a:notepad-plus-plus:notepad++:8.6.3","cpe:2.3:a:notepad-plus-plus:notepad++:8.6.4","cpe:2.3:a:notepad-plus-plus:notepad++:8.6.5","cpe:2.3:a:notepad-plus-plus:notepad++:8.6.6","cpe:2.3:a:notepad-plus-plus:notepad++:8.6.7","cpe:2.3:a:notepad-plus-plus:notepad++:8.6.8","cpe:2.3:a:notepad-plus-plus:notepad++:8.6.9","cpe:2.3:a:notepad-plus-plus:notepad++:8.7","cpe:2.3:a:notepad-plus-plus:notepad++:8.7.1","cpe:2.3:a:notepad-plus-plus:notepad++:8.7.2","cpe:2.3:a:notepad-plus-plus:notepad++:8.7.3","cpe:2.3:a:notepad-plus-plus:notepad++:8.7.4","cpe:2.3:a:notepad-plus-plus:notepad++:8.7.5","cpe:2.3:a:notepad-plus-plus:notepad++:8.7.6","cpe:2.3:a:notepad-plus-plus:notepad++:8.7.7","cpe:2.3:a:notepad-plus-plus:notepad++:8.7.8","cpe:2.3:a:notepad-plus-plus:notepad++:8.7.9","cpe:2.3:a:notepad-plus-plus:notepad++:8.8","cpe:2.3:a:notepad-plus-plus:notepad++:8.8.1","cpe:2.3:a:notepad-plus-plus:notepad++:8.8.2","cpe:2.3:a:notepad-plus-plus:notepad++:8.8.3","cpe:2.3:a:notepad-plus-plus:notepad++:8.8.4","cpe:2.3:a:notepad-plus-plus:notepad++:8.8.5","cpe:2.3:a:notepad-plus-plus:notepad++:8.8.6","cpe:2.3:a:notepad-plus-plus:notepad++:8.8.7","cpe:2.3:a:notepad-plus-plus:notepad++:8.8.8"]}