Microsoft’s February Patch Tuesday closed a dangerous loophole in the modern Notepad app that could let an attacker turn a simple Markdown (.md) file into a remote code execution (RCE) trap — a single click on a crafted link inside Notepad’s Markdown view could launch unverified protocols and...
Microsoft has patched a surprisingly dangerous hole in the modern Windows 11 Notepad app that allowed clickable Markdown links to invoke non‑web protocols and launch files without the usual Windows confirmation, tracked as CVE‑2026‑20841 and fixed in the February 2026 Patch Tuesday updates...
