They finally did it. Microsoft has successfully over-engineered a text editor into a threat vector.
This CVE is an 8.8 severity RCE in Notepad of all things lmao.
Apparently, the "innovation" of adding markdown support came with the ability of launching unverified protocols that load and execute remote files.
We have reached a point where the simple act of opening a .md file in a native utility can compromise your system. Is nothing safe anymore? 😭
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20841
#noai #microslop #microsoft #windows #programming #writing #windows11 #enshittification #cybersecurity #infosec #technology
![“Network filters are universally loathed. Duh. no one’s ever written a regular expression that can distinguish art from porn, and no one ever will. [..]
The web's got about 100 billion page on it; if you have a fail-rate of one-tenth of 1 percent, you'll overblock (or underblock, or both) 100,000,000 pages. That's several ‘Library of Congress’ worth of pointless censorship, or all the porn ever made, time 10, missed though underfilterring.
You'd be an idiot to even try.”
— Cory Doctorow : “Petard: A tale of just deserts” in MIT Technology review SF annual 2014 : Twelve tomorrows](https://pub-1146fd6c5b9443ce8a2adde617e7847d.r2.dev/images/status/44452d58-82d1-4f9e-9c69-48cf4b9f7588.jpeg "“Network filters are universally loathed. Duh. no one’s ever written a regular expression that can distinguish art from porn, and no one ever will. [..]
The web's got about 100 billion page on it; if you have a fail-rate of one-tenth of 1 percent, you'll overblock (or underblock, or both) 100,000,000 pages. That's several ‘Library of Congress’ worth of pointless censorship, or all the porn ever made, time 10, missed though underfilterring.
You'd be an idiot to even try.”
— Cory Doctorow : “Petard: A tale of just deserts” in MIT Technology review SF annual 2014 : Twelve tomorrows")
![Screenshot of a page from the book Enshittification, by Cory Doctorow. Two sections are highlighted:
❝
Reach into your pocket and take out your little black distraction rectangle. Open up the camera app. Point it at this page. Press the shutter button. Congratulations, you've just committed copyright infringement. See you in court.
[...]
(You can delete the photo now. Or better yet, post it to your group chat or social media account with a note telling people how much you're enjoying this book! Here, I'll provide you with some explanatory text: Greetings, followers of my reader! This is Cory Doctorow writing to you, and your friend has very nearly finished reading my excellent 2025 book, Enshittification: Why Everything Suddenly Got Worse and What to Do About It, available at finer bookstores everywhere, as well as on monopoly electronic retail sites that should be condemned to the scrap heap of history.)](https://pub-1146fd6c5b9443ce8a2adde617e7847d.r2.dev/images/status/f22c35cc-c9ce-42d9-b0ac-3971da915a45.png "Screenshot of a page from the book Enshittification, by Cory Doctorow. Two sections are highlighted:
❝
Reach into your pocket and take out your little black distraction rectangle. Open up the camera app. Point it at this page. Press the shutter button. Congratulations, you've just committed copyright infringement. See you in court.
[...]
(You can delete the photo now. Or better yet, post it to your group chat or social media account with a note telling people how much you're enjoying this book! Here, I'll provide you with some explanatory text: Greetings, followers of my reader! This is Cory Doctorow writing to you, and your friend has very nearly finished reading my excellent 2025 book, Enshittification: Why Everything Suddenly Got Worse and What to Do About It, available at finer bookstores everywhere, as well as on monopoly electronic retail sites that should be condemned to the scrap heap of history.)")
