new CVE

Look inside

Its unsanitized text input

We may be laughing now, but Microslop is going to roll out 10-factor authentication on Shithub because of this.

win11 shitty notepad or all notepad?

So AI slop coding is going great!

The US has lost the AI race.

wtf version of notepad even lets you create clickable hyperlinks in the first place?

hilarious

or maybe it was just a backdoor that the wrong person noticed

The 3 people who reported it are:
Cristian Papa, Romanian in Romania,
Alasdair Gorniak, slav (?) in the UK,
Chen, Chinese person, https://x.com/chen9918b/status/2015688020356407548, "Chinese history and culture enthusiasts & market analysis"

its so over for the Amerikkkans. Can't even install remote code execution backdoors in peace.

I'm not a tech guy so I don't know why I - cough - clicked the link. I assumed I wouldn't be able to understand anything. But after taking a ~10 second gander at the page I saw this and it made me laugh.

How could an attacker exploit this vulnerability?

An attacker could trick a user into clicking a malicious link inside a Markdown file opened in Notepad, causing the application to launch unverified protocols that load and execute remote files.

The Windows Notepad app has a glaring vulnerability. It sends all your contained data to some Microsoft AI if you click the wrong button.