Closed Door Security首席运营官Cassius Edison评论称："这又是一起严重的供应链攻击，可能影响数百万台设备。Notepad++在IT和开发环境中无处不在，这种信任度使得此类入侵极其危险。虽然漏洞并非源自软件本身，但攻击者能在更新基础设施中潜伏数月并操纵用户下载路径。" ...

微软近日发布了一项安全更新，修复了 Windows“记事本”应用程序中的一个高危漏洞。需注意的是，此问题与近期 Notepad++ 出现的安全事件无关。该漏洞可能被攻击者利用，在受害者计算机上远程执行恶意代码。

The vulnerability comes from the way Notepad handles Markdown hyperlinks. Attackers craft malicious .md files with embedded ...

Microsoft has patched a high-severity RCE vulnerability in the Windows 11 Notepad app that could allow attackers to silently execute malicious files ...

A command injection flaw in the Windows Notepad App now gives remote attackers a path to execute code over a network, turning ...

The flaw exploits Notepad’s recently added support for Markdown, a formatting language used on websites and in files, to run malicious code on a Windows PC.

据Notepad++称，该事件始于6月。共享托管服务遭到入侵直到9月2日，即使在失去访问权限后，攻击者仍保留了内部服务的凭证直到12月2日。虽然调查显示攻击于11月10日结束，但Notepad++作者写道："我估计整个入侵期从6月持续到2025年12月2日，那时所有攻击者访问权限被彻底终止。" ...

Microsoft has fixed a "remote code execution" vulnerability in Windows 11 Notepad that allowed attackers to execute local or ...

According to Microsoft's release notes, the update fixes 25 elevation of privilege flaws, 12 remote code execution ...

Microsoft has fixed a serious security vulnerability affecting Markdown files in Notepad. In the company’s Tuesday patch ...

There's a remote code execution vulnerability in Notepad which is leveraged via the recently introduced formatting abilities to make tables in the app.

The vulnerability should have been automatically fixed via a patch, but it's worth double-checking to ensure Windows 11 has been updated recently on your device.