Main
Vulnerability Database
Exploits
ID:12085 - Exploit for Untrusted search path in Notepad++ - CVE-2025-49144
ID:12085 - Exploit for Untrusted search path in Notepad++ - CVE-2025-49144
Published: November 7, 2025
Vulnerability identifier: #VU112060
Vulnerability risk: Low
CVE-ID: CVE-2025-49144
CWE-ID: CWE-426
Exploitation vector: Local access
Vulnerable software:
Notepad++
Notepad++
Link to public exploit:
Vulnerability description
The vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to usage of an untrusted search path in application's installer. A local user can place a malicious binary into a specific location on the system and execute arbitrary code with escalated privileges.
Remediation
Install updates from vendor's website.