Windows Paint Remote Code Execution Vulnerability

pvumpvum
in Security

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83844

Metrics: CVSS:3.1 8.1 / 7.1

Quick check in Powershell:
Get-AppxPackage -Name Microsoft.Paint | Select-Object Name, Version

It should be 11.2609.401.0 or higher

Comments

  • AnthonySmithAnthonySmith AdministratorProviderOG

    This is.... erm... WHAT THE FUCK!

    Is NOTHING SAFE!!!!!!!!!!!!! MS PAINT RCE.... this is a real moment in time, I honestly cant believe this for many reasons.... we fucked it, and by it I mean everything.

    TierHive - Hourly VPS - NAT Native - /24 per customer - DE, UK, SG, CA x2, USA x5, FR x3, AU, PL, NL, JP, BR, ZA
    FREE tokens on sign up, try before you buy. | Static Hosting Free for life: https://tierhive.com/static-hosting/

  • mikhomikho AdministratorOG Bash Me Gently

    My goto program when using a reinstalled windows machine

    Meet Nix and Bruce @ https://twobirdsonelesbox.com
    My project/stuff page @ https://serveraddict.net

  • WSSWSS OG Guru Meditation Error

    An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..

    A fucking paint program. Why the hell is it attaching to anything on the network?

    And I, for one, welcome our new insect overlords.

  • WSSWSS OG Guru Meditation Error

    I played a guessing game with GLM 5.3- and it sounds like an echo of my statement. Eery.

    LowEndSpirit - VPS Hosting and tech forum

    And I, for one, welcome our new insect overlords.

  • derxderx

    AI finds like 10000 new vulnerabilities every day and then we use AI to patch them.

    I already have to patch my dozens of linux vps every few days and now windows too......

  • tulipyuntulipyun
    edited 8:01AM

    WTF, Windows Paint???!!!

    Thankfully, none of my systems were affected.

  • corecore

    There have been too many vulnerabilities lately

  • poeipoei

    kind karma donations helps me keep my TPUG World of Commodore 2026 ad running one final month. t.

Sign In or Register to comment.