CVE-2026-20841

CVE-2026-20841 is a high-severity command injection vulnerability (CWE-77) in the Microsoft Windows Notepad application, allowing local code execution. An attacker could exploit this by tricking a user into interacting with specially crafted input, such as a malicious Markdown link. This vulnerability carries a CVSS score of 7.8 (High), indicating high impact on confidentiality, integrity, and availability, with user interaction required for exploitation. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community attention with 9 mentions and 7 media articles, suggesting potential future interest from threat actors.