CVE-2023-47452
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Nov 30, 2023
Updated: Dec 6, 2023
CWE ID 427
Summary
CVE-2023-47452 is a newly identified vulnerability affecting Notepad++ version 6.5. This issue involves an Untrusted search path, which permits local users to exploit the msimg32.dll file located in the current working directory. By leveraging this vulnerability, users can gain escalated privileges within the system. This weakness poses a significant risk to the security of affected systems and necessitates immediate attention and patching to mitigate the threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share