CVE-2026-20841 potential Windows Notepad vulnerability abuse

Thiru N@Iamthiru

•updated Feb 12, 2026•12•0•157

CrowdStrike Query – Potential Notepad Abuse via WindowsApps Detects execution of notepad.exe from the Windows Apps directory (excluding version 11.2510) with command-line arguments containing “.md”. This behavior may indicate invocation of a non-standard Notepad build for Markdown file handling, potentially linked to application misconfiguration or malicious activity.