High-Risk Vulnerability Found in Microsoft Paint

hotnews.ro

High-Risk Vulnerability Found in Microsoft Paint

First seen 7 Nov 2026, 22:17 UTC • •61.5

Article Content

1 / 3

Browse articles

ThreatCluster •November 7, 2026 at 22:18 UTC

•CVE-2026-83844 allows remote code execution in Microsoft Paint on Windows 11.
•The vulnerability has a CVSS score of 8.1, classifying it as high risk.
•A security update is available but not yet fully deployed to all affected systems.

A security vulnerability has been identified in Microsoft Paint that could allow remote code execution on Windows 11 systems without user interaction. This flaw, cataloged as CVE-2026-83844, was disclosed on October 13, 2026, and has a CVSS score of 8.1, indicating high severity. Microsoft has developed a security update, but it has not yet been deployed to all affected systems. The vulnerability is notable for its 'zero-click' nature, meaning it can be exploited without any action from the user, although successful exploitation requires advanced technical knowledge and specific conditions. The first public proof-of-concept (PoC) for this vulnerability was released on November 6, 2026, raising concerns about potential exploitation in the wild.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 17h ago How this analysis works

Timeline

2026-10-13

CVE-2026-83844 published

Microsoft disclosed a vulnerability in Paint that allows remote code execution on Windows 11.

2026-11-06

First public PoC released

A proof-of-concept for exploiting the Paint vulnerability was made public, increasing the risk of exploitation.

More articles in this cluster (2)

Threat Graph

4 entities, 4 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (1)

Zero-day Exploit

Vulnerability (1)

CVE-2026-83844

Affected Platform (2)

Windows
Windows 11

Relationships

CVE-2026-83844 targets Windows
CVE-2026-83844 targets Windows 11
Zero-day Exploit targets Windows
Zero-day Exploit targets Windows 11

Following this threat?

Track CVE-2026-83844 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Common questions

What systems are affected?

The vulnerability affects Microsoft Paint on Windows 11 systems.

Is there a patch available?

Yes, Microsoft has prepared a security update, but it has not yet reached all affected systems.

How urgent is this vulnerability?

The vulnerability is classified as high risk, and the release of a PoC increases the urgency for users to apply the patch.

Continue Reading

Windows 11 Paint Vulnerability CVE-2026-83844: Patch Availability Issues Persist Microsoft disclosed a high-severity vulnerability in Windows Paint, tracked as CVE-2026-83844, on October 13, 2026. The flaw allows remote code execution via an out-of-bounds read, affecting versions prior to 11.2605.91.0. Despite Microsoft stating that a patch is available, users and IT administrators report…

Critical RCE Vulnerability in Prefab UI Disclosed A critical remote code execution vulnerability, CVE-2026-120338, was disclosed on November 1, 2026, affecting Prefab UI's Generative UI sandbox. The flaw allows attackers to execute arbitrary Python code by exploiting Deno's permissions, enabling file read/write access on the host server. This vulnerability affects…