How did the Notepad vulnerability in Windows 11 work
Microsoft only added support for Markdown in Notepad on Windows 11 last year. The feature allowed users to open and edit Markdown files directly in the basic text editor. However, the addition reportedly drew criticism, with some saying that Microsoft was adding unnecessary features and AI capabilities into core apps such as Notepad and Paint, contributing to concerns about bloatware in the operating system.
The company said it has no evidence that hackers exploited the flaw in real-world attacks. Still, it chose to patch the issue as part of its regular security updates. The fix ensures that Notepad no longer allows such links to launch unsafe protocols that could compromise a device.
According to a report by The Verge, this is not the first time a text editor has faced security concerns. Recently, the third-party Notepad++ app also disclosed that some users may have downloaded a malicious update linked to Chinese state-sponsored attackers.
First Published: Feb 12 2026 | 12:11 PM IST