Microsoft has fixed a "remote code execution" vulnerability in Windows 11 Notepad that allowed attackers to execute local or remote programs by tricking users into clicking specially crafted Markdown links, without displaying any Windows security warnings.
https://www.bleepingcomputer.com/news/microsoft/windows-11-notepad-flaw-let-files-execute-silently-via-markdown-links/
BleepingComputer
npub1pk…z6763
2026-02-11 23:15:56 UTC
Author Public Key
npub1pkrnqz97z2wckgmwglckccgg65eanvw3wpvuses7npqlvv6st06svz6763Seen on
wss://relay.momostr.pinkPublished at
2026-02-11 23:15:56 UTCEvent JSON
{
"id": "394d02012f8414b41a5d87e7bec6728eb8b42a464f93cc7ef9bb47f0b6ae4bfd",
"pubkey": "0d873008be129d8b236e47f16c6108d533d9b1d17059c8661e9841f633505bf5",
"created_at": 1770851756,
"kind": 1,
"tags": [
[
"proxy",
"https://infosec.exchange/@BleepingComputer/116054540715915901",
"web"
],
[
"proxy",
"https://infosec.exchange/users/BleepingComputer/statuses/116054540715915901",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/users/BleepingComputer/statuses/116054540715915901",
"pink.momostr"
],
[
"-"
]
],
"content": "Microsoft has fixed a \"remote code execution\" vulnerability in Windows 11 Notepad that allowed attackers to execute local or remote programs by tricking users into clicking specially crafted Markdown links, without displaying any Windows security warnings.\n\nhttps://www.bleepingcomputer.com/news/microsoft/windows-11-notepad-flaw-let-files-execute-silently-via-markdown-links/",
"sig": "7d39bf1d3c99cf999a9f91d45af25875222d40cca183724831af379f4e6cb74c1e162dfc708edf5df8f5256e57e5a1b068136f21af57d2933e9a8736144d0d09"
}