Windows Notepad App Remote Code Execution Vulnerability
ThinkingNews Desk · how this was written
A vulnerability in the Windows Notepad app, present in Windows 11, allowed attackers to achieve remote code execution by tricking users into clicking malicious Markdown links that could launch unverified protocols. Microsoft has released a fix that blocks the exploit, preventing the malicious links from triggering remote program execution.
Written from all 3 reports below, not from any single one.
How it was reported
- Hacker News·Windows Notepad App Remote Code Execution Vulnerability
A vulnerability in the Windows Notepad app allows remote code execution. This flaw poses a security risk to users. The vulnerability enables malicious code to be executed remotely.
- The Verge·Microsoft fixes Notepad flaw that could trick users into clicking malicious Markdown links
Microsoft fixed a Notepad flaw that could trick users into clicking malicious Markdown links. Clicking such links could launch unverified protocols, allowing remote code execution attacks. A fix was issued to prevent potential exploits.
- TechMeme·Microsoft fixed a vulnerability in Notepad in Windows 11 allowing attackers to execute remote programs by tricking users into clicking malicious Markdown links (Lawrence Abrams/BleepingComputer)
Microsoft fixed a vulnerability in Windows 11 Notepad. Attackers could execute remote programs by tricking users into clicking malicious Markdown links. The issue allowed for remote code execution.