ZeusQA
Start free

Known exploited vulnerabilities

Notepad++ vulnerabilities attackers have used

Every Notepad++ vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.

The short answer

CISA lists 1 Notepad++ vulnerability as exploited in the wild, 1 of them added in the last 12 months. The most recent is CVE-2025-15556, added Feb 12, 2026. Notepad++ has the most entries (1).

In KEV, all time
1
Added, last 12 months
1
Used in ransomware
0
New CVEs this week
0

Every Notepad++ entry in CISA KEV

  1. CVE-2025-15556

    Added · due

    Notepad++ Download of Code Without Integrity Check Vulnerability

    Notepad++ when using the WinGUp updater, contains a download of code without integrity check vulnerability that could allow an attacker to intercept or redirect update traffic to download and execute an attacker-controlled installer. This…

Related

Know the day a CVE lands in your code

Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.

Start freeSee how a run works