Remember when Notepad was just… Notepad? A simple text editor nobody asked to be modernized?

Yeah, Microsoft didn’t care either. They bolted on Markdown support and AI features anyway. And now we’ve got CVE-2026-20841. Remote code execution. Via a text file. This is the kind of thing that makes you go “oh come on, really?”

you are viewing a single comment's thread
view the rest of the comments
[–] 4 points 9 months ago (3 children)

The software itself wasn't compromised. But the download link was. So if you downloaded it in the last year, you downloaded state sponsored malware.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 3 points 9 months ago (2 children)

    No. The download link was never compromised. What was compromised was the built-in auto-update feature.

  • source
  • parent
  • hideshow 2 child comments