Back Gbhackers

Notepad++ v8.9.7 Security Update Fixes 5 Vulnerabilities, Including Stack Buffer Overflow and Zip Slip Flaws

Gbhackers •Divya • July 15, 2026

Notepad++ has released version 8.9.7, codenamed “Slava Ukraini.” This update addresses five security vulnerabilities related to session-file handling, environment-variable expansion, ZIP extraction, macro validation, and the Windows installation process. The release date was July 14, 2026, and includes three CVE-tracked vulnerabilities as well as two additional GitHub Security Advisories that have not yet received CVE […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Notepad++ v8.9.7 Update Addresses Critical Vulnerabilities Including Command Injection Notepad++ released version 8.9.7 on July 14, 2026, fixing five security vulnerabilities. Among these is a critical PowerShell command injection flaw that could allow arbitrary code execution during installation. The update also addresses issues related to session-file handling, environment-variable expansion, ZIP extraction, and macro validation. Three of the vulnerabilities are tracked by CVEs, while two are noted in GitHub Security Advisories without CVE designations. The vulnerabilities affect users of Notepad++ on Windows systems, which is widely used for text editing. Users are advised to update to the latest version to mitigate risks. The vulnerabilities could potentially lead to unauthorized access and system compromise if exploited. 5 sources 71

Extracted Entities

Notepad++ v8.9.7 Security Update Fixes 5 Vulnerabilities, Including Stack Buffer Overflow and Zip Slip Flaws

The full story

Extracted Entities

CWE Weaknesses (2)

Platforms (1)

Vulnerabilities (1)