Users could be tricked into running arbitrary code, but the issue was patched last week.

Microsoft confirms CVE-2026-20841, a Remote Code Execution flaw in Windows 11 Notepad via Markdown links. Patch now rolling out.

Microsoft has patched the Windows Notepad remote code execution vulnerability CVE-2026-20841, warning users to install February 2026 updates to block exploits.

Microsoft has patched a high-severity RCE vulnerability in the Windows 11 Notepad app that could allow attackers to silently execute malicious files ...

You can infect your PC with malware without ever leaving Notepad, thanks to recent updates and additions. Hooray.

Microsoft fixes a high-severity Notepad RCE flaw tied to Markdown files. Install the latest updates to protect your PC.

The workaround here is pretty simple, thanks to Microsoft. They have now made apps like Notepad, Wordpad, and Paint Optional features on Windows. This means they can be uninstalled and reinstalled as ...

High-severity flaw fixed in Windows 11 Notepad ...