{"id":212817,"date":"2026-02-11T18:15:00","date_gmt":"2026-02-11T23:15:00","guid":{"rendered":"https:\/\/news-you-need.com\/index.php\/2026\/02\/11\/windows-11-notepad-flaw-let-files-execute-silently-via-markdown-links\/"},"modified":"2026-02-12T18:05:13","modified_gmt":"2026-02-12T23:05:13","slug":"windows-11-notepad-flaw-let-files-execute-silently-via-markdown-links","status":"publish","type":"post","link":"https:\/\/news-you-need.com\/index.php\/2026\/02\/11\/windows-11-notepad-flaw-let-files-execute-silently-via-markdown-links\/","title":{"rendered":"Windows 11 Notepad flaw let files execute silently via Markdown links"},"content":{"rendered":"

Windows 11 Notepad flaw let files execute silently via Markdown links<\/a><\/p>\n

https:\/\/www.bleepingcomputer.com\/news\/microsoft\/windows-11-notepad-flaw-let-files-execute-silently-via-markdown-links\/<\/a><\/p>\n

Publish Date: 2026-02-11 18:15:00<\/a><\/p>\n

Source Domain: www.bleepingcomputer.com<\/a><\/p>\n

\n

Microsoft has fixed a “remote code execution” vulnerability in Windows 11 Notepad that allowed attackers to execute local or remote programs by tricking users into clicking specially crafted Markdown links, without displaying any Windows security warnings.<\/p>\n

With the release\u00a0of Windows 1.0, Microsoft introduced Notepad, a simple, easy-to-use text editor that, over the years, became popular for quickly jotting notes, reading text files, creating to-do lists, or acting\u00a0as a code editor.<\/p>\n

For those who needed a rich text format (RTF) editor that supported different fonts, sizes, and formatting tools like bold, italics, and lists, you could use Windows Write and later WordPad.<\/p>\n

\"Wiz\"<\/p>\n

However, with the release of Windows 11, Microsoft decided to discontinue WordPad and remove it from Windows.<\/p>\n

Instead, Microsoft rewrote Notepad to modernize it so it could act as both a simple text editor and an RTF editor, adding Markdown support that lets you format text and insert clickable links.<\/p>\n

Markdown support means Notepad can open, edit, and save Markdown files (.md), which are plain text files that use simple symbols to format text and\u00a0represent lists or links.<\/p>\n

For example, to bold text or create a clickable link, you would add the following markdown text:<\/p>\n

**This is bold text**
\n[Link to BleepingComputer](https:\/\/www.bleepingcomputer.com\/)<\/p>\n

Microsoft fixes\u00a0Windows Notepad RCE flaw<\/h2>\n

As part of the February 2026 Patch Tuesday updates, Microsoft disclosed that it fixed a high-severity Notepad remote code execution flaw tracked as\u00a0CVE-2026-20841.<\/p>\n

“Improper neutralization of special elements used in a command (‘command injection’) in Windows Notepad App allows an unauthorized attacker to execute code over a network,” explains Microsoft’s security bulletin.<\/p>\n

Microsoft has attributed the discovery of the flaw to\u00a0Cristian Papa,\u00a0Alasdair Gorniak, and\u00a0Chen, and says it can be exploited by tricking a user into clicking a malicious Markdown link.<\/p>\n

“An…<\/p>\n

Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Windows 11 Notepad flaw let files execute silently via Markdown links https:\/\/www.bleepingcomputer.com\/news\/microsoft\/windows-11-notepad-flaw-let-files-execute-silently-via-markdown-links\/ Publish Date: 2026-02-11…<\/p>\n","protected":false},"author":1,"featured_media":212818,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/www.bleepstatic.com\/content\/hl-images\/2026\/02\/11\/modern-notepad-spotlight.jpg","fifu_image_alt":"","footnotes":""},"categories":[15],"tags":[27],"class_list":["post-212817","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","tag-vulnerability"],"_links":{"self":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/212817"}],"collection":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/comments?post=212817"}],"version-history":[{"count":1,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/212817\/revisions"}],"predecessor-version":[{"id":212819,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/212817\/revisions\/212819"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/media\/212818"}],"wp:attachment":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/media?parent=212817"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/categories?post=212817"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/tags?post=212817"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}