Microsoft has confirmed that it fixed a serious security flaw in Notepad that allowed attackers to embed malicious Markdown files in text files.