Tim (Wadhwa-)Brown 

Markdown-oopsie in Notepad \o/:

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20841

#threatintel, #txt

Security Update Guide - Microsoft Security Response Center

Feb 10 at 9:22pmWeb
Show threadTim (Wadhwa-)Brown Feb 19

A bit more on oopsie.md:

https://www.zerodayinitiative.com/blog/2026/2/19/cve-2026-20841-arbitrary-code-execution-in-the-windows-notepad

#threatintel, #txt

Zero Day Initiative — CVE-2026-20841: Arbitrary Code Execution in the Windows Notepad

In this excerpt of a TrendAI Research Services vulnerability report, Nikolai Skliarenko and Yazhi Wang of the TrendAI Research team detail a recently patched command injection vulnerability in the Windows Notepad application. This bug was originally discovered by Cristian Papa and Alasdair Gorniak

Zero Day Initiative
Show threadRon BowesFeb 20
@timb_machine Cool writeup, but boy it's hard to take "TrendAI"seriously
Show threadAdam BeerFeb 12
@timb_machine I…wait…Is the "vulnerability" the fact that Markdown files can contain links? Because that's what it looks like to me.