Notepad vulnerability on Windows 11

Nabinium · 2026-02-13T13:18:49+0000

"An attacker could trick a user into clicking a malicious link inside a Markdown file opened in Notepad, causing the application to launch unverified protocols that load and execute remote files," explains Microsoft.

Windows 11 Notepad flaw let files execute silently via Markdown links

Microsoft has fixed a "remote code execution" vulnerability in Windows 11 Notepad that allowed attackers to execute local or remote programs by tricking users into clicking specially crafted Markdown links, without displaying any Windows security warnings.

www.bleepingcomputer.com

It was only recently when Notepad++ was compromised, and now Windows' built-in Notepad has a fresh vulnerability...

Rroff · 2026-02-13T13:35:22+0000

Fortunately this one does need user interaction but still.

Armageus · 2026-02-13T13:52:52+0000

Shock as an overcomplicated version of Notepad has more vectors for attack. :rolleyes:

The original version never had these problems

mrk · 2026-02-13T21:11:00+0000

ic1male · 2026-02-13T21:23:36+0000

Shame they can't fix the flippin' Windows 11 taskbar...

mrk · 2026-02-13T21:26:54+0000

You can fix that, StarAllBack is the way, don't wait for MS.