You can infect your PC with malware without ever leaving Notepad, thanks to recent updates and additions. Hooray.

There's a remote code execution vulnerability in Notepad which is leveraged via the recently introduced formatting abilities to make tables in the app.

Microsoft just patched a serious vulnerability in Notepad for Windows that could allow hackers to take control of victims' ...

Microsoft has patched a severe security vulnerability tied to Notepad's Markdown feature. Here's what you need to know to ...

Microsoft has fixed a serious security vulnerability affecting Markdown files in Notepad. In the company’s Tuesday patch notes, Microsoft says a bad actor could carry out a remote code execution ...

According to Microsoft's release notes, the update fixes 25 elevation of privilege flaws, 12 remote code execution vulnerabilities, three denial of service vulnerabilities, five security feature ...

Remove the risk by never clicking on a random link ...

I've been testing PC and mobile software for more than 20 years, focusing on photo and video editing, operating systems, and web browsers. Prior to my current role, I covered software and apps for ...

ZDNET experts put every product through rigorous testing and research to curate the best options for you. If you buy through our links, we may earn a commission. Learn Our Process 'ZDNET Recommends': ...

Microsoft has patched the Windows Notepad remote code execution vulnerability CVE-2026-20841, warning users to install ...

The flaw exploits Notepad’s recently added support for Markdown, a formatting language used on websites and in files, to run malicious code on a Windows PC.