The flaw exploits Notepad’s recently added support for Markdown, a formatting language used on websites and in files, to run malicious code on a Windows PC.
Clicking the malicious links could launch "unverified protocols." ...