Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Notepad++ is a free and open-source source code editor. From 8.9.4 until 8.9.6, Notepad++ contains a local privilege escalation vulnerability in the installer. During installation, the installer invokes powershell.exe without using an absolute path after setting the working directory to the installation contextMenu directory. If an attacker can pre-place a malicious powershell.exe in a user-writable custom installation directory, and a privileged user later runs the installer and selects that directory, the attacker-controlled executable is launched with the elevated privileges of the installer. This vulnerability is fixed in 8.9.6.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-46710 Notepad++ is a free and open-source source code editor. From 8.9.4 until 8.9.6, Notepad++ contains a local privilege escalation vulnerability in the installer. During… https://www.cve.org/CVERecord?id=CVE-2026-46710
Post summary
An announcement of a local privilege escalation flaw in Notepad++ installers between versions 8.9.4 and 8.9.6.
🚨*CVE* CVE-2026-46710 Notepad++ is a free and open-source source code editor. From 8.9.4 until 8.9.6, Notepad++ contains a local privilege escalation vulnerability in the installer. During… https://www.cve.org/CVERecord?id=CVE-2026-46710 ----- Traducción: CVE-2026-46710 Not… http://infoflow.cloud`
Post summary
CVE-2026-46710 is a disclosed local privilege escalation vulnerability in Notepad++ installers (8.9.4‑8.9.6), with no known PoC, exploitation, or patch mentioned.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | notepad-plus-plus | notepad\+\+ | - | - | - |