Microsoft confirms CVE-2026-20841, a Remote Code Execution flaw in Windows 11 Notepad via Markdown links. Patch now rolling out.
The vulnerability comes from the way Notepad handles Markdown hyperlinks. Attackers craft malicious .md files with embedded ...
Users could be tricked into running arbitrary code, but the issue was patched last week.
Notepad++ 8.9.2 fixes update hijack exploited to deliver malware, patches RCE flaw, and hardens WinGUp security.
According to Microsoft's release notes, the update fixes 25 elevation of privilege flaws, 12 remote code execution ...
Infrastructure delivering updates for Notepad++—a widely used text editor for Windows—was compromised for six months by ...
Microsoft has patched a high-severity RCE vulnerability in the Windows 11 Notepad app that could allow attackers to silently execute malicious files ...
Microsoft has fixed a "remote code execution" vulnerability in Windows 11 Notepad that allowed attackers to execute local or ...
Notepad++ has adopted a "double-lock" design for its update mechanism to address recently exploited security gaps that ...
You can infect your PC with malware without ever leaving Notepad, thanks to recent updates and additions. Hooray.