Microsoft Windows Notepad — known CVE vulnerabilities

Every CVE whose affected-product data names Microsoft Windows Notepad, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2026-20841 — CVSS 7.8 (high): Improper neutralization of special elements used in a command ('command injection') in Windows Notepad App allows an unauthorized attacker…