notepad-plus-plus Known Exploited Vulnerabilities

Evidence-backed KEV intelligence for notepad-plus-plus products — CISA KEV status, confidence, sensor telemetry, and virtual-patch availability.

Total KEVs

1

In CISA KEV

1

Beyond CISA KEV

0

Sensor Observed

0

Virtual Patch Available

0

notepad-plus-plus KEVs Added by Year

Loading...

1 notepad-plus-plus KEV added all time (primary attestation date).

Attested CVEs

CVE Confidence CISA KEV Added
CVE-2025-15556

Notepad++ < 8.8.9 WinGUp Updater Lacks Update Integrity Verification

Confirmed In CISA 01 Jun 2026

Common Vulnerability Classes (CWE)

  • CWE-494 — Download of Code Without Integrity Check 1

Browse all known exploited vulnerabilities · What is a known exploited vulnerability? · Methodology