A remote code execution vulnerability (CVE-2026-83844) has been discovered in Microsoft Paint, allowing attackers to execute arbitrary code on a user's device by tricking them into opening a specially crafted image file.
Background
This CVE was reported to HackerOne and tracked under Microsoft Security Response Center (MSRC) ID 284724. It affects Windows MS Paint and could allow privilege escalation to SYSTEM level when a user opens a maliciously crafted image file.
- Source
- Hacker News (RSS)
- Published
- Nov 6, 2026 at 04:43 AM
- Score
- 7.0 / 10