CVE-2023-40036

Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to global buffer read overflow in `CharDistributionAnalysis::HandleOneChar`. The exploitability of this issue is not clear. Potentially, it may be used to leak internal memory allocation information. As of time of publication, no known patches are available in existing versions of Notepad++.

• CWE-120
• CWE-120

• https://securitylab.github.com/advisories/GHSL-2023-092_Notepad__/Exploit, Third Party Advisory
• https://securitylab.github.com/advisories/GHSL-2023-092_Notepad__/Exploit, Third Party Advisory

Published

Aug 25, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-40030Cargo downloads a Rust project’s dependencies and compiles t…6.1
• CVE-2023-40031Notepad++ is a free and open-source source code editor. Vers…7.8
• CVE-2023-40032libvips is a demand-driven, horizontally threaded image proc…5.5
• CVE-2023-40033Flarum is an open source forum software. Flarum is affected …7.1
• CVE-2023-40034Woodpecker is a community fork of the Drone CI system. In af…8.1
• CVE-2023-40035Craft is a CMS for creating custom digital experiences on th…7.2
• CVE-2023-40037Apache NiFi 1.21.0 through 1.23.0 support JDBC and JNDI JMS …6.5
• CVE-2023-40038Arris DG860A and DG1670A devices have predictable default WP…8.8
• CVE-2023-40039An issue was discovered on ARRIS TG852G, TG862G, and TG1672G…9.8
• CVE-2023-4004A use-after-free flaw was found in the Linux kernel's netfil…7.8
• CVE-2023-40040An issue was discovered in the MyCrops HiGrade "THC Testing …5.3
• CVE-2023-40041TOTOLINK T10_v2 5.9c.5061_B20200511 has a stack-based buffer…9.8