Remember when Notepad was just… Notepad? A simple text editor nobody asked to be modernized?

Yeah, Microsoft didn’t care either. They bolted on Markdown support and AI features anyway. And now we’ve got CVE-2026-20841. Remote code execution. Via a text file. This is the kind of thing that makes you go “oh come on, really?”

  • khapyman@sopuli.xyz
    link
    fedilink
    English
    arrow-up
    11
    ·
    1 day ago

    That’s pretty much the problem. You know how to work around the issue. I know how to work around the issue. Institutional knowledge doesn’t and just opens the application just like they’ve always done. I resolved this one by associating .csv files with Notepad++ company wide. Now this is a mandated change so they’ll grumble and get on track.

    The real issue I have with all this is changing data without consent. It’s like the new Notepad is malware all by itself, doesn’t even need remote exploits.

    And hello fellow Linux user :)

    • Random_Character_A@lemmy.world
      link
      fedilink
      English
      arrow-up
      1
      ·
      17 hours ago

      It has always been the problem with Micro$oft products. You don’t use them the way you want or need to. You use them the way Micro$oft envisioned it.

      • Random_Character_A@lemmy.world
        link
        fedilink
        English
        arrow-up
        3
        ·
        17 hours ago

        I understood that it wasn’t notepad++ software itself, but some foreign actor did some high level shit on the update channels of their platform.