Notepad++ release 8.9.9 is available:
https://notepad-plus-plus.org/news/v899-released/
Notepad++ v8.9.9 vulnerability fixes, new features & bug-fixes:
Vulnerability: Fix WM_COPYDATA sender authentication bypass. CVE ID not assigned yet
Vulnerability: Fix WM_COPYDATA privilege escalation allowing launch plugin commands execution. CVE ID not assigned yet
Vulnerability: Fix heap disclosure. CVE ID not assigned yet
Vulnerability: Fix TOCTOU risk when saving temp file under UAC. CVE ID not assigned yet
Vulnerability: Fix out-of-bounds array access via NPPM_MENUCOMMAND. CVE ID not assigned yet
Vulnerability: Fix heap buffer overflow in SAML decode of MIME Tools plugin. CVE ID not assigned yet
Update to Scintilla 5.6.9 & Lexilla 5.5.5. (Implement #18595)
Update to boost 1.92.0. (Implement #18536)
Improve Find in Files performance. (Fix #15248, #13730)
Add an option to change dialog font & font size. (Fix #5648, #9914, #10745, #17183)
Add an option to display the Incremental Search bar at the top. (Fix #18486)
Remember incremental Search options across sessions. (Fix #18484)
Enhance the Cliboard history panel UI. (Implement #18531, #18559)
Fix files not opening via “Edit with Notepad++” when app path use 8.3 path format. (Fix #18530, report)
Fix space dots ignore display scaling. (Fix #18589)
Fix Document Switcher persistence issues. (Fix #10574, #10950)
Fix loss of editor focus when dismissing the Document Switcher with Ctrl+Esc. (report)
Fix Clipboard History buffer over-read & truncation of UTF-16 surrogate pairs. (Fix #18519, #report)
Fix auto-completion & call tip persist issue when moving/resizing window. (Fix #18581)
Fix the current doc hidden due to missing auto-scroll in Windows dialog listview. (Fix report)
Fix incomplete repainting of Windows dialog list after resizing then sorting. (Fix #16267)
Fix the ESC key not closing Windows dialog after a document is closed. (Fix #18554)
Add UDL as a selectable default language for new documents. (Fix #979, #11097, #18325)
Fix UDL dialog edits scrolling the wrapped document down. (Fix #18105)
Detect external file modifications in both views instead of only the active view. (Fix #7581)
Add Structured Text language support. (Fix #18365)
Fix several memory leaks. (Fixed by #18466, #18467, #18465, #18473, #18482, #18512, #18535)
Fix Markdown UDL link highlighting being broken by ‘@’ in the URL. (Fix #18009)
Fix Find-in-Files macro playback ignoring empty filters. (Fix #8170)
Fix Count and Mark All ignoring zero-length regex matches. (Fix #7896)
Fix bugs in Function List for C, TypeScript, INI, PowerShell & Bash. (Fix #10162, #18358, #18574, #18174)
Fix the “inherit” flag for FG/BG not being cleared in Style Configurator. (Fix #14197)
Set new UDL to use theme FG, transparent BG, no bold/italic/underline by default. (Fix #18387, #5622, #17054)
Fix spurious NPPN_READONLYCHANGED notification when files are deleted. (Fix #16289)
Fix call-tip parameter highlighting being confused by commas in string literals. (Fix #8650)
Fix missing warning display when deleting files from Notepad++ on Windows 7. (Fix report)
Unify internal list views highlight style. (Fix #18563)
Update Python & R keyword lists. (Fix #18464, #18445)
Auto-updater will be triggered in about 1 week, if no critical issue found in this release.