Even Microsoft Paint is being targeted by cyberattackers — update now or face the consequences
- Microsoft fixes high-severity Paint vulnerability that could allow remote code execution through crafted image files
- Security updates are delivered through the Microsoft Store, leaving some users temporarily stuck on vulnerable versions
- Users should verify their Paint version and install the latest update as soon as it becomes available
Microsoft has addressed a high-severity vulnerability in Paint that allowed threat actors to run malicious code remotely. However, fixing the issue doesn’t seem to be a straightforward process for users, as the patched version, surprisingly, remains unavailable for download for some people.
Tracked as CVE-2026-83844 and with a severity score of 8.1/10 (high), this bug was described by the National Vulnerability Database (NVD) as an “out-of-bounds read in Windows Paint [that] allows an unauthorized attacker to execute code over a network.”
In theory, a threat actor could create a special image that, if opened via paint, can trigger the flaw and execute...
Copyright of this story solely belongs to www.techradar.com. To see the full text click HERE
