Notepad vulnerability on Windows 11

Nabinium · Friday at 13:18

"An attacker could trick a user into clicking a malicious link inside a Markdown file opened in Notepad, causing the application to launch unverified protocols that load and execute remote files," explains Microsoft.

Windows 11 Notepad flaw let files execute silently via Markdown links

Microsoft has fixed a "remote code execution" vulnerability in Windows 11 Notepad that allowed attackers to execute local or remote programs by tricking users into clicking specially crafted Markdown links, without displaying any Windows security warnings.

www.bleepingcomputer.com

It was only recently when Notepad++ was compromised, and now Windows' built-in Notepad has a fresh vulnerability...

Rroff · Friday at 13:35

Fortunately this one does need user interaction but still.

Armageus · Friday at 13:52

Shock as an overcomplicated version of Notepad has more vectors for attack. :rolleyes:

The original version never had these problems

mrk · Friday at 21:11

ic1male · Friday at 21:23

Shame they can't fix the flippin' Windows 11 taskbar...

mrk · Friday at 21:26

You can fix that, StarAllBack is the way, don't wait for MS.

mid_gen · Sunday at 14:09

Armageus said:
Shock as an overcomplicated version of Notepad has more vectors for attack.

The original version never had these problems

I’m actually quite a fan of OSes getting first class markdown support. It’s all the document formatting most people need and would be great if more people start using it and I never have to receive another .docx file!