MS Paint Remote Code Execution Vulnerability

Re:MS Paint Remote Code Execution Vulnerability by VorpalWay on Thursday November 05, 2026 @04:14PM (#50384542)

I'm thankfully out of the loop on Windows these days, but as I remember it Paint did not have any network features? Is that still true? If if is, maybe it is a misfiling of the CVE and it isn't remote?

Or are they chaining a browser auto opening a download in paint, (but browsers shouldn't do that)...

[ Parent | on HN ]

Re:MS Paint Remote Code Execution Vulnerability by kuboble on Thursday November 05, 2026 @04:24PM (#50384643)

These days paint has copilot...

[ Parent | on HN ]

Re:MS Paint Remote Code Execution Vulnerability by robotnikman on Thursday November 05, 2026 @04:29PM (#50384702)

This is the only network feature paint has iirc, so that's probably it.

[ Parent | on HN ]

Re:MS Paint Remote Code Execution Vulnerability by jdiff on Thursday November 05, 2026 @07:11PM (#50386432)

It's the only network feature I can think of, but what is it doing opening a port to wait and listen for anything?

[ Parent | on HN ]

Re:MS Paint Remote Code Execution Vulnerability by radicalbyte on Thursday November 05, 2026 @04:48PM (#50384927)

Why for the love of everything that is good does MS Paint have network trash in it. It's a super simple bitmap editor. Like Notepad, it's simple and just works.

Make a new product and bundle that as an option if you want to drastically change the functionality.

[ Parent | on HN ]

Re:MS Paint Remote Code Execution Vulnerability by waz0wski on Thursday November 05, 2026 @04:50PM (#50384959)

Hate to break it to you..

> Notepad in Windows includes AI features powered by Copilot that help refine and shorten text with the assistance of GPT. By default, these AI features are enabled on managed devices

https://learn.microsoft.com/en-us/windows/client-management/...

[ Parent | on HN ]

Re:MS Paint Remote Code Execution Vulnerability by SV_BubbleTime on Thursday November 05, 2026 @05:03PM (#50385120)

> Like Notepad, it's simple and just works.

I mean… what else were the people working on Notepad and Paint to do!?

The order came down to integrate AI, and they wanted to be promoted.

Every single day I’m happier and happier than I use Linux now.

[ Parent | on HN ]

Re:MS Paint Remote Code Execution Vulnerability by angry_octet on Thursday November 05, 2026 @06:09PM (#50385859)

Some distro will default to integrating an AI into bash any day now. It's only a matter of time till less and vim have AI search.

[ Parent | on HN ]

Re:MS Paint Remote Code Execution Vulnerability by zbentley on Thursday November 05, 2026 @06:32PM (#50386105)

There are certainly many options to choose from: https://gist.github.com/ColinKennedy/8a0eea1b18b6e22bc10daa6...

[ Parent | on HN ]

Re:MS Paint Remote Code Execution Vulnerability by angry_octet on Saturday November 07, 2026 @06:35AM (#50403643)

I've asked Claude to review top candidates from https://github.com/ColinKennedy/neovim-ai-plugins

[ Parent | on HN ]

Re:MS Paint Remote Code Execution Vulnerability by reorder9695 on Friday November 06, 2026 @04:47AM (#50390285)

Luckily with OSS we can fork it

[ Parent | on HN ]

Re:MS Paint Remote Code Execution Vulnerability by augment_me on Thursday November 05, 2026 @09:00PM (#50387214)

If they know what you paint/edit, they can sell you ads better

[ Parent | on HN ]