{"id":"CVE-2026-86056","title":"Notepad++ is a free and open-source source code editor","summary":"Notepad++ is a free and open-source source code editor. Prior to 8.9.8, the NPPM_SAVESESSION handler in PowerEditor/src/NppBigSwitch.cpp converts lParam to a sessionInfo pointer and dereferences its nbFile, files, and sessionFilePathName…","severity":"medium","cvss":5.5,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-476"],"vendor":"notepad-plus-plus","product":"notepad-plus-plus","affected":["notepad-plus-plus < 8.9.8"],"published":"2026-09-22","updated":"2026-09-23","sourceUpdated":"2026-09-23T18:28:25.093","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-86056","references":[{"url":"https://github.com/notepad-plus-plus/notepad-plus-plus/commit/8b33f52e7aa488b1222d3cfce5903a38dd63101f","label":"security-advisories@github.com"},{"url":"https://github.com/notepad-plus-plus/notepad-plus-plus/releases/tag/v8.9.8","label":"security-advisories@github.com"},{"url":"https://github.com/notepad-plus-plus/notepad-plus-plus/security/advisories/GHSA-j85c-6wc9-p98p","label":"security-advisories@github.com"},{"url":"https://notepad-plus-plus.org/news/v898-released","label":"security-advisories@github.com"}],"tags":["nvd","cve.org","exploit-available"],"epss":0.00162,"epssPercentile":0.04628,"exploitAvailable":true,"ssvc":{"exploitation":"poc","automatable":"no","technicalImpact":"partial","timestamp":"2026-09-22T17:40:16.206252Z"},"ingestedAt":"2026-09-22T18:08:12.490Z","slug":"CVE-2026-86056","body":"## Overview\n\nNotepad++ is a free and open-source source code editor. Prior to 8.9.8, the NPPM_SAVESESSION handler in PowerEditor/src/NppBigSwitch.cpp converts lParam to a sessionInfo pointer and dereferences its nbFile, files, and sessionFilePathName members without checking for null. A process running at the same or a higher Windows integrity level on the same desktop can send NPPM_SAVESESSION with a null lParam, immediately terminating Notepad++ and causing denial of service and loss of unsaved documents. This issue is fixed in version 8.9.8.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":42,"depthScoreParts":{"impact":30.3,"likelihood":0,"exploitation":12,"ransomware":0},"changes":[]}