CVE-2022-31902

MediumCVSS 5.5

Published: 01/02/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.52%

41th percentile - higher than 41% of all known CVEs

Summary

A stack overflow vulnerability was discovered in Notepad++ version 8.4.1 within the Finder::add() component. This flaw could be exploited for remote code execution or application crash.

Risk Assessment

An attacker could exploit this vulnerability to gain control of the system or cause a denial of service (DoS) by providing specially crafted input.

Recommendation

It is recommended to immediately update Notepad++ to the latest available version that includes a fix for this vulnerability.

Original NVD description (English source)

Notepad++ v8.4.1 was discovered to contain a stack overflow via the component Finder::add().