Privilege Escalation in Notepad++ Installer via Insecure Executable Search Path

Summary

In Notepad++ version 8.8.1 and earlier, a privilege escalation vulnerability exists in the installer due to uncontrolled search path execution. Attackers may trick users via social engineering or clickjacking to place both the official installer and a malicious .exe in a vulnerable directory (e.g., Downloads). When the installer is executed, the malicious executable runs with SYSTEM-level privileges.

Impact

Attackers can gain SYSTEM-level privileges Compromise of system integrity and confidentiality Could lead to full system control if exploited Exploitable by any user with access to the system

Affected Products

CVSS Metrics

CWE Information