A command injection flaw in the Windows Notepad App now gives remote attackers a path to execute code over a network, turning ...

Notepad++ 8.9.2 fixes update hijack exploited to deliver malware, patches RCE flaw, and hardens WinGUp security.

Infrastructure delivering updates for Notepad++—a widely used text editor for Windows—was compromised for six months by ...

The vulnerability comes from the way Notepad handles Markdown hyperlinks. Attackers craft malicious .md files with embedded links that trigger unverified protocol handlers when users click them, ...