Version 8.9.8.1 du 25/09/2026- Vulnerability: Fix crash caused by “Open file” & “Search on Internet” commands.
- Vulnerability: Fix Function List array out-of-bounds risks when parsing functions.
- Vulnerability: Fix UAC operations performed without verifying the caller.
- Vulnerability: Fix incomplete UNC detection allowing NTLM leak bypass.
- Vulnerability: Fix crash of NPPM API when invalid value passed as argument.
- Regression: Fix failure to open files via Notepad++ symlink paths.
- Fix a crash after canceling UAC saving operation.
- Fix Network Path Warning dialog usability problem.
- Fix symlinks setting for Folder as Workspace not remembered across sessions.
- Fix continous validation of the same server when loading network path files.
- Fix UDL line comments not being correctely detected.
- Fix Unicode text alternation in clipboard by Notepad++ encoding conversion.
- Fix incorrect paste behaviour in column mode.
- Fix visual glitch in the UDL dialog when main window uses vertical tabs.
- Fix GDI leaks of tab context menu.
- Fix inaccurate display information in PluginAdmin “Updates” tab.
Version 8.9.8 du 26/08/2026- Vulnerabilty: Fix an eventual crash while loading UDL.
- Vulnerabilty: Fix an eventual crash when loading a UTF-16 file.
- Vulnerabilty: Fix out-of-bounds array write.
- Vulnerabilty: Fix authenticode verification bypass.
- Vulnerabilty: Fix a TOCTOU issue in the Notepad++ Updater (WinGUp).
- Vulnerabilty: Fix session backup path-traversal allowing deletiion outside backup directory.
- Vulnerabilty: Fix potential exposure of Windows login info (SMB/NTLM) via UNC path.
- Vulnerabilty: Fix shortcuts.xml HMAC bypass via the “Run a Macro Multiple Times”.
- Vulnerabilty: Fix Null pointer in NPPM_SAVESESSION handler causing crash.
- Vulnerabilty: Fix stack buffer overflow caused by overlong session paths.
- Vulnerabilty: Fix Folder as Workspace “Run by system” target hijacking issue.
- Vulnerabilty: Fix install-path injection possibility with PowerShell.
- Vulnerabilty: Fix lower IL (Integrity Level) process sends WM_COMMAND to higher IL Notepad++.
- Vulnerabilty: Fix Notepad++ UIPI Bypass via WM_COPYDATA.
- Fix crash in WM_COPYDATA COPYDATA_PARAMS for invalid payload.
- Fix crash in API NPPM_ALLOCATE* calls.
- Add an option to allow loading symlinks in Folder as Workspace.
- Regression: Fix loading session for alone subview and doc/tab with untitle name.
- Fix CJK IME issues in Save As dialog.
- Update to Scintilla 5.6.6 & Lexilla 5.5.3.
- Add plugin deactivation capability.
- Add “-monitoringMode” command line argument to open files with monitoring enabled.
- Fix Proxy Settings issue in portable mode.
- Fix langs.xml model update not not applying file extension fields.
- Fix luminosity slider in ChooseColor not visible in dark mode.
- Fix empty sub-menus in compact language menu.
- Fix Search Results vertical scrolling not matching with OS mouse settings.
- Use modern question mark icon in dark message box.
- Format count numbers using current locale separators when needed.