Microsoft Paint Can Be Exploited to Run Malicious Code Over the Network
MS Paint Remote Code Execution Vulnerability
Microsoft has published CVE-2026-83844, a high-severity flaw in Windows Paint caused by an out-of-bounds read that lets an unauthorized attacker execute code over a network. The bug affects Paint versions from 11.0.0.0 up to 11.2605.91.0 and carries a CVSS score of 8.1. A patch is available through Microsoft's security update guide.
Out-of-bounds read in Windows Paint allows an unauthorized attacker to execute code over a network.