7.8
High
CVE-2026-20841 Improper neutralization of special elements used in a command ('command injection') in Windows Notepad App allows an…
Description
Improper neutralization of special elements used in a command ('command injection') in Windows Notepad App allows an unauthorized attacker to execute code locally.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Windows Notepad 11.0 | 11.0.0 → < 11.2512.26.0 | 11.2512.26.0 |
References
- Windows Notepad App Remote Code Execution Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified