title: notepad-plus-plus - DLL Hijacking
description: Notepad++ versions 8.4.1 and before are vulnerable to DLL hijacking where an attacker can replace the vulnerable dll (UxTheme.dll) with his own dll and run arbitrary code in the context of Notepad++.
problem types: CWE-427 Uncontrolled Search Path Element
affected:
{
product: notepad-plus-plus
vendor: notepad-plus-plus
versions:
lessThan: unspecified, status: affected, version: v8.3, versionType: custom
lessThanOrEqual: v8.4.4, status: affected, version: unspecified, versionType: custom
}
metrics:
other: [
content: {'attackComplexity': 'LOW', 'attackVector': 'LOCAL', 'availabilityImpact': 'HIGH', 'baseScore': 6.5, 'baseSeverity': 'MEDIUM', 'confidentialityImpact': 'HIGH', 'integrityImpact': 'HIGH', 'privilegesRequired': 'HIGH', 'scope': 'UNCHANGED', 'userInteraction': 'REQUIRED', 'vectorString': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H', 'version': 3.1}
type: unknown
]
solutions: Update version to v8.4.5 or later