* The Verge article
Microsoft fixes Notepad flaw that could trick users into clicking malicious Markdown links
https://www.theverge.com/tech/877295/microsoft-notepad-markdown-security-vulnerability-remote-code-execution
# Part of the content was translated from Gemini 3.0 and then modified.
Microsoft has fixed a serious security vulnerability in Notepad that could affect Markdown files. As first reported by The Register, Microsoft said in its patch notes on Tuesday that malicious attackers could "trick users into clicking malicious links within Markdown files opened in Notepad" to carry out remote code execution attacks.
* 'Windows Notepad App Remote Code Execution Vulnerability' document reference
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20841
Microsoft first added support for Markdown, a common text formatting language, to Notepad in Windows 11 last May. This move has sparked criticism that Microsoft is overloading its operating system with unnecessary software (bloatware) by adding new features and AI capabilities to apps like Notepad and Paint.
[The rest of the content is omitted]
* Post by Tom Warren of The Verge
"Notepad was once a lightweight text editor for Windows, but Microsoft has been adding more and more features to it in recent years. The newly added Markdown support feature resulted in the discovery of a remote code execution vulnerability. 😬"
https://bsky.app/profile/tomwarren.co.uk/post/3melp32exck2x
