CVE-2025-56383

{
  "id": "CVE-2025-56383",
  "sourceIdentifier": "[email protected]",
  "published": "2025-09-26T18:15:36.490",
  "lastModified": "2026-11-05T23:10:00.150",
  "vulnStatus": "Deferred",
  "cveTags": [
    {
      "sourceIdentifier": "[email protected]",
      "tags": [
        "disputed"
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Notepad++ v8.8.3 has a DLL hijacking vulnerability, which can replace the original DLL file to execute malicious code. NOTE: this is disputed by multiple parties because the behavior only occurs when a user installs the product into a directory tree that allows write access by arbitrary unprivileged users."
    },
    {
      "lang": "es",
      "value": "Notepad++ v8.8.3 tiene una vulnerabilidad de secuestro de DLL, que puede reemplazar el archivo DLL original para ejecutar código malicioso. NOTA: esto es disputado por múltiples partes porque el comportamiento solo ocurre cuando un usuario instala el producto en un árbol de directorios que permite acceso de escritura por usuarios no privilegiados arbitrarios."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "version": "n/a",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "baseScore": 8.4,
          "baseSeverity": "HIGH",
          "attackVector": "LOCAL",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 2.5,
        "impactScore": 5.9
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2025-09-30T03:55:10.161379Z",
          "id": "CVE-2025-56383",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-427"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/notepad-plus-plus/notepad-plus-plus",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/zer0t0/CVE-2025-56383-Proof-of-Concept",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/zer0t0/CVE-2025-56383-Proof-of-Concept/issues/1",
      "source": "[email protected]"
    },
    {
      "url": "https://www.vicarius.io/vsociety/posts/cve-2025-56383-detect-notepad-vulnerability",
      "source": "[email protected]"
    },
    {
      "url": "https://www.vicarius.io/vsociety/posts/cve-2025-56383-mitigate-notepad-vulnerability",
      "source": "[email protected]"
    }
  ]
}