PT-2022-21130 · Microsoft · Uxtheme.Dll

Published 2022-09-28 · Updated 2022-09-29 · CVE-2022-32168

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Notepad++ versions 8.4.1 and before

Description The issue allows an attacker to replace the vulnerable dll (UxTheme.dll) with their own dll, enabling them to run arbitrary code in the context of Notepad++. This is a result of DLL hijacking.

Recommendations For Notepad++ versions 8.4.1 and before, consider updating to a version that is not affected by this issue. As a temporary workaround, restrict access to the vulnerable dll (UxTheme.dll) to minimize the risk of exploitation.

Exploit

Fix

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2022-32168

Affected Products

Uxtheme.Dll

References · 7

• 🔥 https://mend.io/vulnerability-database/CVE-2022-32168 · Exploit
• https://github.com/notepad-plus-plus/notepad-plus-plus/commit/85d7215d9b3e0d5a8433fc31aec4f2966821051e · Patch
• https://osv.dev/vulnerability/CVE-2022-32168 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-32168 · Security Note
• https://t.me/cvenotify/36917 · Telegram Post
• https://t.me/cibsecurity/50568 · Telegram Post
• https://t.me/cvenotify/36904 · Telegram Post