430
Microsoft's Notepad Got Pwned (They Added AI To It, So...) (foss-daily.org)
submitted 9 months ago by to c/technology@lemmy.world
48 comments fedilink hide all child comments
 

Remember when Notepad was just… Notepad? A simple text editor nobody asked to be modernized?

Yeah, Microsoft didn’t care either. They bolted on Markdown support and AI features anyway. And now we’ve got CVE-2026-20841. Remote code execution. Via a text file. This is the kind of thing that makes you go “oh come on, really?”

you are viewing a single comment's thread
view the rest of the comments
[–] 0 points 9 months ago (2 children)

Can anyone tell me if Win 10 LTSC IoT 21H2 is also affected? This is the only M$ OS I run on a few devices (I pretentiously use Linux BTW). If notepad.exe on LTSC is still being molested by updates, that's beyond fucked.

  • permalink
  • fedilink
  • source
  • hideshow 2 child comments
    •
  • [–] 2 points 9 months ago (1 child)

    I don't think it does. The MSRC page linking to the notepad update release notes/download goto the windows store version of notepad, which lists a requirement of Windows 11 version 22000.0 or higher.

    I haven't gone more in depth than that though.

    https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20841

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •