someone earlier today said "RCE in Notepad" and i was like "haha funny" and then someone ELSE said RCE in Notepad and then i was like youve gotta be fucking kidding me

[legacv@infosec.exchange]

someone earlier today said "RCE in Notepad" and i was like "haha funny" and then someone ELSE said RCE in Notepad and then i was like youve gotta be fucking kidding me

[nullenvk@yourwalls.today]

@legacv Windows 11 in a nutshell

[darfplatypus@infosec.exchange]

@legacv it's not even Tavis this time

[kelson@notes.kvibber.com]

@legacv At this rate, Notepad++ will be a simpler program soon.

[0x00string@infosec.exchange]

@legacv they were, its a local command injection, not an rce.

[yayroos@tech.lgbt]

@legacv oh my god. microsoft. you know what. you could have left notepad exactly the way it was for another decade and literally nobody would be mad. notepad was fine it was perfect and now is has copilot and CVEs

[megatronicthronbanks@mastodon.social]

@legacv Use Notepad++ or any of the dozen better apps. Notepad was always a little piece of shit.

[yayroos@tech.lgbt]

@legacv stop doing clickable links in notepad. society never needed clickable link in notepad. wanted to follow a link from a file you had open in notepad anyway for a laugh? we had a tool for this it was called copy paste!

[wolf480pl@mstdn.io]

@legacv
> How could an attacker exploit this vulnerability?

> An attacker could trick a user into clicking a malicious link inside a Markdown file opened in Notepad, causing the application to launch unverified protocols that load and execute remote files.

Security Update Guide - Microsoft Security Response Center

(msrc.microsoft.com)