Microsoft fixes Notepad flaw that could trick users into clicking malicious Markdown links

Microsoft has fixed a superior information vulnerability affecting Markdown files successful Notepad. In the company's Tuesday spot notes, Microsoft says a atrocious histrion could transportation retired a distant codification execution onslaught by tricking users "into clicking a malicious nexus wrong a Markdown record opened successful Notepad," arsenic reported earlier by The Register.

Clicking the nexus would "launch unverified protocols," allowing attackers to remotely load and execute malicious files connected a victim's computer, according to the spot notes. Microsoft says determination isn't immoderate grounds of attackers exploiting the Notepad vulnerability (CVE-2026-20841) successful the wild, but it issued a hole for …

Read the afloat communicative astatine The Verge.