CVE-2026-20841

High CVSS: 7.8

Improper neutralization of special elements used in a command ('command injection') in Windows Notepad App allows an unauthorized attacker to execute code locally.

Vendor

Microsoft

Product

Windows Notepad

CWE

CWE-77

Yayın Tarihi

2026-02-10 18:16:22

Güncelleme

2026-02-25 14:32:14

Source Identifier

secure@microsoft.com

KEV Date Added

Kategoriler

CWE-77 Windows Notepad HIGH Microsoft 2026

Referanslar

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20841 https://news.ycombinator.com/item?id=46971516

Benzer Kayıtlar

Critical

CVE-2026-33107

Server-side request forgery (ssrf) in Azure Databricks allows an unauthorized attacker to elevate privileges over a netw…

Critical

CVE-2026-33105

Improper authorization in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over…

Critical

CVE-2026-32213

Improper authorization in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.

Critical

CVE-2026-32211

Missing authentication for critical function in Azure MCP Server allows an unauthorized attacker to disclose information…

High

CVE-2026-32173

Improper authentication in Azure SRE Agent allows an unauthorized attacker to disclose information over a network.

Critical

CVE-2026-26135

Server-side request forgery (ssrf) in Azure Custom Locations Resource Provider (RP) allows an authorized attacker to ele…