Microsoft discloses unauthenticated remote code execution flaw in Windows Paint
VULNERABILITYMicrosoftredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
Microsoft's October security release disclosed an out-of-bounds read (CWE-125) in Windows Paint that could allow remote code execution without authentication or user interaction. The attack reportedly uses a specially crafted network packet sent to an affected service, though the advisory does not name that service, and Microsoft rates exploitation as Less Likely with no known exploitation. Administrators should confirm the corrected Paint build is installed on every device rather than assume automatic updates have worked.
For IT people · Written by AI from 1 source · Wrong?
What to do
- Update Windows Paint through the Microsoft Store to the build listed in Microsoft's October advisory.
- Check the installed Paint version afterwards, for example with the PowerShell command Get-AppxPackage Microsoft.Paint, and compare it with the advisory.
- Administrators should confirm the fix reached every device, since some systems reportedly kept receiving older builds.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Cyber Security News
Who and what is in it
Products