Windows Notepad App Remote Code Execution Vulnerability

#1

Post by riffraff » Wed, Feb 11, 2026, 6:15 AM UTC

Windows Notepad App Remote Code Execution Vulnerability
cve.org

Re: Windows Notepad App Remote Code Execution Vulnerability

#2

Post by consp » Wed, Feb 11, 2026, 8:30 AM UTC

So what this means is every Windows program is now a cve nightmare (or goldmine, depending on view)?

Re: Windows Notepad App Remote Code Execution Vulnerability

#3

Post by dark-star » Wed, Feb 11, 2026, 8:31 AM UTC

Yeah, clicking unverified links in a markdown document to launch an executable....

Clicking unknown links is always a bad idea, but a CVE for that? I dunno....

Re: Windows Notepad App Remote Code Execution Vulnerability

#4

Post by __bax » Wed, Feb 11, 2026, 8:31 AM UTC

Just now Notepad integrates very useful copilot assistant... What can go wrong

Re: Windows Notepad App Remote Code Execution Vulnerability

#5

Post by bstsb » Wed, Feb 11, 2026, 8:32 AM UTC

i imagine it’s probably something to do with the massive scope creep recently, especially with AI and the Markdown features - they’ve tried to fit some of WordPad’s rich text features following its removal

Re: Windows Notepad App Remote Code Execution Vulnerability

#6

Post by reddalo » Wed, Feb 11, 2026, 8:32 AM UTC

I miss when the Notepad was doing what the Notepad is supposed to do: show a text file, plain and simple.

Re: Windows Notepad App Remote Code Execution Vulnerability

#7

Post by rmunn » Wed, Feb 11, 2026, 8:32 AM UTC

"An attacker could trick a user into clicking a malicious link inside a Markdown file opened in Notepad, causing the application to launch unverified protocols that load and execute remote files."

I didn't even know Notepad would render Markdown.

Re: Windows Notepad App Remote Code Execution Vulnerability

#8

Post by bayindirh » Wed, Feb 11, 2026, 8:33 AM UTC

dark-star wrote: post #3

Yeah, clicking unverified links in a markdown document to launch an executable.... Clicking unknown links is always a bad idea, but a CVE for that? I dunno....

Notepad was the epitome of a single, well functioning app in Windows for the last eternity of two.

Rewriting it to integrate AI and some bells and whistles recklessly and having a CVE is tragicomic if you ask me.

Re: Windows Notepad App Remote Code Execution Vulnerability

#9

Post by darig » Wed, Feb 11, 2026, 8:33 AM UTC

bstsb wrote: post #5

i imagine it’s probably something to do with the massive scope creep recently, especially with AI and the Markdown features - they’ve tried to fit some of WordPad’s rich text features following its removal

[dead]

Re: Windows Notepad App Remote Code Execution Vulnerability

#10

Post by eviks » Wed, Feb 11, 2026, 8:33 AM UTC

What AI great job!