this post was submitted on 11 Feb 2026
995 points (98.6% liked)

Technology

81128 readers
3714 users here now

This is a most excellent place for technology news and articles.

Our Rules

  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots

founded 2 years ago
MODERATORS
L3s@lemmy.world
enu@lemmy.world
technopagan@lemmy.world
L4s@lemmy.world
L3s@hackingne.ws
995
A remote code execution vulnerability has been found in Microslop Notepad (msrc.microsoft.com)
submitted 3 days ago by als@lemmy.blahaj.zone to c/technology@lemmy.world
128 comments fedilink hide all child comments
 

They finally did it. Microsoft has successfully over-engineered a text editor into a threat vector.

This CVE is an 8.8 severity RCE in Notepad of all things.

Apparently, the "innovation" of adding markdown support came with the ability of launching unverified protocols that load and execute remote files.

We have reached a point where the simple act of opening a .md file in a native utility can compromise your system.

you are viewing a single comment's thread
view the rest of the comments
[–] Lfrith@lemmy.ca 3 points 2 days ago (1 children)

Windows 11 ltsc comes with old Notepad. Looks like the same one from Windows 10.

[–] dbtng@eviltoast.org 2 points 1 day ago (1 children)

Hmm. This is what mine looks like.

[–] Lfrith@lemmy.ca 4 points 1 day ago (2 children)

That looks like a nightmare.

Windows 11 ltsc is interesting in that its like a time capsule. More like Windows 7 than 10. Has no Microsoft store, no onedrive, no game bar. And has old Microsoft paint, calculator, and notepad from Windows 10 with no tabs.

There's not really anything to uninstall. And it just gets security updates. Its a bare bones OS that feels closer to Linux because of that without the crap that even Windows 10 had showing tiktok and meta in the start menu to remove.

[–] dbtng@eviltoast.org 2 points 1 day ago (1 children)

Ah. Yes, it appears I've been using the ESU option. That was the simplest thing to do.
I use the registration utility from massgrave, added 3 years to my registration.

https://massgrave.dev/windows10_eol

But right there on that page, they cover Windows 10 IoT Enterprise LTSC 2021.
It sounds like that's what I need. Stripped down Win10. I like that idea.
Thanks, friend.

[–] Lfrith@lemmy.ca 2 points 12 hours ago* (last edited 12 hours ago)

Yeah, IOT is the version to choose at install with it getting 10 years of support compared to 5 years for the regular enterprise.

[–] dbtng@eviltoast.org 2 points 1 day ago

I have a laptop still running Win10. I'll look into this. Thx.