You can infect your PC with malware without ever leaving Notepad, thanks to recent updates and additions. Hooray.

Microsoft confirms CVE-2026-20841, a Remote Code Execution flaw in Windows 11 Notepad via Markdown links. Patch now rolling ...

Microsoft has patched the Windows Notepad remote code execution vulnerability CVE-2026-20841, warning users to install February 2026 updates to block exploits.

Microsoft said it recently fixed a security flaw in Notepad that could let an attacker download and run malicious code.