Users could be tricked into running arbitrary code, but the issue was patched last week.

At one time or another, you’ve probably been guilty of heading out the door without doing a running warmup. And we get it: Busy runners don’t always have a ton of extra time in the day for elaborate ...

The flaw exploits Notepad’s recently added support for Markdown, a formatting language used on websites and in files, to run malicious code on a Windows PC.

Microsoft has patched the Windows Notepad remote code execution vulnerability CVE-2026-20841, warning users to install February 2026 updates to block exploits.