{"id":"CVE-2022-32168","state":"PUBLISHED","title":"notepad-plus-plus - DLL Hijacking","description":"Notepad++ versions 8.4.1 and before are vulnerable to DLL hijacking where an attacker can replace the vulnerable dll (UxTheme.dll) with his own dll and run arbitrary code in the context of Notepad++.","publishedAt":"2022-09-28T09:00:15.327Z","updatedAt":"2025-05-21T14:14:43.298Z","severity":{"score":7.8,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","source":"CISA-ADP"},"assigner":"Mend","products":["notepad-plus-plus notepad-plus-plus"],"affected":[{"vendor":"notepad-plus-plus","product":"notepad-plus-plus","versions":[{"version":"v8.3","status":"affected","lessThan":"unspecified","versionType":"custom"},{"version":"unspecified","status":"affected","lessThanOrEqual":"v8.4.4","versionType":"custom"}]}],"references":["https://www.mend.io/vulnerability-database/CVE-2022-32168","https://github.com/notepad-plus-plus/notepad-plus-plus/commit/85d7215d9b3e0d5a8433fc31aec4f2966821051e"],"weaknesses":["CWE-427"],"ingestedAt":"2026-10-29T19:50:09.278Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/32xxx/CVE-2022-32168.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2022-32168","state":"PUBLISHED","datePublished":"2022-09-28T09:00:15.327Z","dateUpdated":"2025-05-21T14:14:43.298Z","assignerShortName":"Mend","assignerOrgId":"478c68dd-22c1-4a41-97cd-654224dfacff","dateReserved":"2022-05-31T00:00:00.000Z"},"containers":{"cna":{"title":"notepad-plus-plus - DLL Hijacking","descriptions":[{"lang":"en","value":"Notepad++ versions 8.4.1 and before are vulnerable to DLL hijacking where an attacker can replace the vulnerable dll (UxTheme.dll) with his own dll and run arbitrary code in the context of Notepad++."}],"affected":[{"vendor":"notepad-plus-plus","product":"notepad-plus-plus","versions":[{"version":"v8.3","status":"affected","lessThan":"unspecified","versionType":"custom"},{"version":"unspecified","status":"affected","lessThanOrEqual":"v8.4.4","versionType":"custom"}]}],"references":[{"url":"https://www.mend.io/vulnerability-database/CVE-2022-32168","tags":["x_refsource_MISC"]},{"url":"https://github.com/notepad-plus-plus/notepad-plus-plus/commit/85d7215d9b3e0d5a8433fc31aec4f2966821051e","tags":["x_refsource_MISC"]}],"metrics":[{"other":{"content":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","version":3.1},"type":"unknown"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-427","description":"CWE-427 Uncontrolled Search Path Element","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"Mend","dateUpdated":"2022-09-28T09:00:15.000Z","orgId":"478c68dd-22c1-4a41-97cd-654224dfacff"},"credits":[{"lang":"en","value":"Mend Vulnerability Research Team (MVR)"}],"datePublic":"2022-09-21T00:00:00.000Z","solutions":[{"lang":"en","value":"Update version to v8.4.5 or later"}],"source":{"advisory":"https://www.mend.io/vulnerability-database/","discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.0.9"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"vulnerabilitylab@whitesourcesoftware.com","DATE_PUBLIC":"Sep 21, 2022, 12:00:00 AM","ID":"CVE-2022-32168","STATE":"PUBLIC","TITLE":"notepad-plus-plus - DLL Hijacking"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"notepad-plus-plus","version":{"version_data":[{"version_affected":">=","version_value":"v8.3"},{"version_affected":"<=","version_value":"v8.4.4"}]}}]},"vendor_name":"notepad-plus-plus"}]}},"credit":[{"lang":"eng","value":"Mend Vulnerability Research Team (MVR)"}],"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Notepad++ versions 8.4.1 and before are vulnerable to DLL hijacking where an attacker can replace the vulnerable dll (UxTheme.dll) with his own dll and run arbitrary code in the context of Notepad++."}]},"generator":{"engine":"Vulnogram 0.0.9"},"impact":{"cvss":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","version":3.1}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE-427 Uncontrolled Search Path Element"}]}]},"references":{"reference_data":[{"name":"https://www.mend.io/vulnerability-database/CVE-2022-32168","refsource":"MISC","url":"https://www.mend.io/vulnerability-database/CVE-2022-32168"},{"name":"https://github.com/notepad-plus-plus/notepad-plus-plus/commit/85d7215d9b3e0d5a8433fc31aec4f2966821051e","refsource":"MISC","url":"https://github.com/notepad-plus-plus/notepad-plus-plus/commit/85d7215d9b3e0d5a8433fc31aec4f2966821051e"}]},"solution":[{"lang":"en","value":"Update version to v8.4.5 or later"}],"source":{"advisory":"https://www.mend.io/vulnerability-database/","discovery":"UNKNOWN"}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.mend.io/vulnerability-database/CVE-2022-32168","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://github.com/notepad-plus-plus/notepad-plus-plus/commit/85d7215d9b3e0d5a8433fc31aec4f2966821051e","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T07:32:55.976Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"timestamp":"2025-05-21T14:14:38.567055Z","id":"CVE-2022-32168","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-05-21T14:14:43.298Z"}}]}}}