You can infect your PC with malware without ever leaving Notepad, thanks to recent updates and additions. Hooray.

There's a remote code execution vulnerability in Notepad which is leveraged via the recently introduced formatting abilities to make tables in the app.

Remove the risk by never clicking on a random link ...

The flaw exploits Notepad’s recently added support for Markdown, a formatting language used on websites and in files, to run malicious code on a Windows PC.