CVE-2022-32168: Notepad-Plus-Plus Notepad++

High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days.

Notepad++ versions 8.4.1 and before are vulnerable to DLL hijacking where an attacker can replace the vulnerable dll (UxTheme.dll) with his own dll and run arbitrary code in the context of Notepad++.

Affected products

• Notepad-Plus-Plus Notepad++: from 8.3, before 8.4.5 (fixed in 8.4.5)

Published 2022-09-28. Last modified 2026-06-17.