Vulnerability in Notepad's Markdown Feature Allows Remote Code Execution

Vulnerability in Notepad's Markdown Feature Allows Remote Code Execution

First seen 11 Feb 2026, 19:30 UTC •CyberkendraCybersecuritynewsHeise.DeRedditCybernews+55 •80% similarity •56.1

Article Content

Browse articles
ThreatCluster

Researchers have discovered a vulnerability in Notepad's newly added Markdown support that can be exploited for remote code execution (RCE). This flaw, tracked as CVE-2026-20841 with a severity score of 8.8, was addressed in Microsoft's latest Patch Tuesday updates. The exploitation requires social engineering tactics, making it less severe than other vulnerabilities.

ThreatCluster AI How this analysis works

Timeline

2026-02-10
CVE-2026-20841 published
2026-02-11
First public PoC released

Extracted Entities

1 / 2

Community

Browse all →

Tracked Entities in This Story

Scattered Spider Lockbit Smokeloader Microsoft Copilot+ PC Internet Explorer Linux Mshtml Notepad Office Financial Government Manufacturing