Potential Exploitation of Notepad++ CVE-2025-49144 Privilege Escalation
Detects possible abuse of Notepad++ installer (v8.8.1) where a malicious regsvr32.exe is executed from an untrusted directory, leading to privilege escalation to SYSTEM.
Sigma
Detects possible abuse of Notepad++ installer (v8.8.1) where a malicious regsvr32.exe is executed from an untrusted directory, leading to privilege escalation to SYSTEM.
Already have an account?