CVE-2025-49144
HIGH 7.3EPSS 0.6%
Notepad++ is a free and open-source source code editor. In versions 8.8.1 and prior, a privilege escalation vulnerability exists in the Notepad++ v8.8.1 installer that allows unprivileged users to gain SYSTEM-level privileges through insecure executable search paths. An attacker could use social engineering or clickjacking to trick users into downloading both the legitimate installer and a malicious executable to the same directory (typically Downloads folder - which is known as Vulnerable directory). Upon running the installer, the attack executes automatically with SYSTEM privileges. This issue has been fixed and will be released in version 8.8.2.
- CVSS v3.1
- 7.3 HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H - EPSS
- 0.61% chance of exploitation in the next 30 days, 47th percentile
- Published
- 2025-06-23
- Updated
- 2026-02-26
Proof-of-concept exploits (8)
- GiZcesi/HJregsvr320★ · 2025-07-02
- TheTorjanCaptain/CVE-2025-49144_PoC89★ · 2025-06-30
- Vr00mm/CVE-2025-491446★ · 2025-06-27
- assad12341/notepad-v8.8.1-LPE-CVE-0★ · 2025-06-26
- b0ySie7e/Notepad-8.8.1_CVE-2025-491446★ · 2025-06-29
- onniio/CVE-2025-491440★ · 2025-09-17
- timsonner/CVE-2025-49144-Research0★ · 2025-07-02
- havertz2110/CVE-2025-49144-PoC