Seriously, just stop (or use Linux)

notepad has formatting now? o_O

does it produce markdown or something?

Yep it’s markdown, and yep they had a CVE with second highest grade cause of it
heh, ofc. Apparently something to do with file:// and such uri handling, apparently executing local files? Yikes.

not just local files

if you click a link to file:///123.45.67.89:69420/files-download/virus.exe it will download and run virus.exe

it still works, but now there is a “Dangerous Link Location: This is not a web link and may lead to the execution of malicious code” warning, but previously it would silently run the file.

kinda wild a file-link ever went straight to executing it after download - which on it’s own could be dangerous as well.

I guess the “the s in IOT stands for security” also applies to notepad: “the s in vibecoding stands for security”

Aren’t CVE grades meaningless anyway with how they are declared in real world?
We run CVEs through our software inventory and configuration and come up with a new score that measures how bad it is for us.
It’s a UWP (i think? they renamed the platform twice already) vibecoded app now, notepad.exe still around.

If you use the formatting bar to format text, it unlocks the View→Markdown menu which has two options - Markdown or Syntax. This allows you to toggle seeing the source or formatted markdown.

If you do not use the formatting bar to format text, markdown is not enabled. I manually typed in text in markdown format and the menu didn’t un-grey.

You can go into the app settings and turn off formatting, which will hide the formatting toolbar.

I think you really have to work hard to be offended by this.