Microsoft said it recently fixed a security flaw in Notepad that could let an attacker download and run malicious code.