Funny you'd mention that, when Notepad had a CVE in it's markdown parsing recently.