Microsoft discloses unauthenticated remote code execution flaw in Windows Paint
VULNERABILITYMicrosoftredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
Microsoft has warned of a flaw in the Windows Paint app that could let an attacker run harmful code on a computer over a network, without needing a password or any click from the user. Microsoft says exploiting it is complex and it has not seen it used in attacks, but users should still install the update.
Like I’m new · Written by AI from 1 source · Wrong?
What to do
- Update Windows Paint through the Microsoft Store to the build listed in Microsoft's October advisory.
- Check the installed Paint version afterwards, for example with the PowerShell command Get-AppxPackage Microsoft.Paint, and compare it with the advisory.
- Administrators should confirm the fix reached every device, since some systems reportedly kept receiving older builds.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Cyber Security News
Who and what is in it
Products