Microsoft patches CVE-2026-20841, a high-severity Windows Notepad flaw that could allow code execution via malicious Markdown files.
Three of the four vulnerabilities remained unpatched months after OX Security reported them to the maintainers.