Notepad++ Security Update Patches Buffer Overflow and Updater Code Execution Flaws

Notepad++ v8.9.7 fixes five security vulnerabilities — notably a stack buffer overflow and a Zip Slip path-traversal in the WinGUp auto-updater — that could allow memory corruption, arbitrary code execution, path traversal to write/read arbitrary files, and installer-time command injection. Given the updater-related issues, organizations should prioritize manual patching, especially where the editor runs with elevated privileges or handles sensitive configuration files.