Windows Notepad

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2026-20841 Feb 10, 18:16 HIGH POC PATCH This Week

Local code execution in Windows Notepad stems from inadequate sanitization of command metacharacters, enabling authenticated users to execute arbitrary commands through specially crafted input. The vulnerability requires user interaction and local access, making it exploitable by attackers with limited system privileges. No patch is currently available.

Windows Command Injection Microsoft Windows Notepad

NVD

CVSS 3.1

7.8

EPSS

0.1%

CVE-2026-20841

EPSS 0% CVSS 7.8

HIGH POC PATCH This Week

Local code execution in Windows Notepad stems from inadequate sanitization of command metacharacters, enabling authenticated users to execute arbitrary commands through specially crafted input. The vulnerability requires user interaction and local access, making it exploitable by attackers with limited system privileges. No patch is currently available.

Windows Command Injection Microsoft +1

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy