Re:MS Paint Remote Code Execution Vulnerability
by greyhound1 on Thursday November 05, 2026 @05:35PM
(#50385483)
Had to go to Microsoft Store to get the fixed version, Windows Update didn't show anything.
[ Parent
| on HN ]
Re:MS Paint Remote Code Execution Vulnerability
by neuroelectron on Thursday November 05, 2026 @06:02PM
(#50385771)
Wow, what a weird confluence of events
Re:MS Paint Remote Code Execution Vulnerability
by pixelpoet on Thursday November 05, 2026 @06:58PM
(#50386322)
If MS knew it would drive people to actually use their app store, they would have created the CVE themselves.
Re:MS Paint Remote Code Execution Vulnerability
by nik282000 on Friday November 06, 2026 @08:58AM
(#50392363)
They kinda did.
Re:MS Paint Remote Code Execution Vulnerability
by gadrev on Thursday November 05, 2026 @07:27PM
(#50386567)
Did the same and it quickly updated itself when I went into the "Paint" page (but I had to go there first). No indication of what just happened a few seconds later.
Re:MS Paint Remote Code Execution Vulnerability
by ManuelKiessling on Thursday November 05, 2026 @07:48PM
(#50386737)
For a split second, I visualized you walking into a brick and mortar Microsoft Store to get your security update done on your laptop, and somewhere in the middle of that split second I caught myself thinking „typical Microsoft“, and then I came to my senses.
Re:MS Paint Remote Code Execution Vulnerability
by supriyo-biswas on Friday November 06, 2026 @12:06AM
(#50388440)
For some reason, I had the same idea.
Re:MS Paint Remote Code Execution Vulnerability
by alt227 on Friday November 06, 2026 @04:48AM
(#50390287)
You made a slip. Thats Apple you are talking about, and it actually happens.
Re:MS Paint Remote Code Execution Vulnerability
by IAmBroom on Friday November 06, 2026 @09:29AM
(#50392705)
If brick and mortar Apple stores are staffed by "Geniuses"...
Re:MS Paint Remote Code Execution Vulnerability
by lossyalgo on Thursday November 05, 2026 @09:24PM
(#50387351)
[delayed]
Re:MS Paint Remote Code Execution Vulnerability
by aDyslecticCrow on Friday November 06, 2026 @09:49AM
(#50392982)
or block ms paint aswell.
Re:MS Paint Remote Code Execution Vulnerability
by Natsu on Friday November 06, 2026 @12:09AM
(#50388451)
[delayed]
Re:MS Paint Remote Code Execution Vulnerability
by iririririr on Friday November 06, 2026 @12:38AM
(#50388611)
why get package after something that is obviously a malicious backdoor?
If I still mamaged any windows host, i would be deploying a remove-package script asap to the entire fleet.
Re:MS Paint Remote Code Execution Vulnerability
by izacus on Friday November 06, 2026 @02:50AM
(#50389381)
What kind of nonsense are you writing here right now? When the next Linux kernel CVE happens, you'll also delete all the kernels from your fleete because they're a malicious backdoor?
When did y'all stop using some basic sense before writing? -_-
Re:MS Paint Remote Code Execution Vulnerability
by BSDobelix on Friday November 06, 2026 @04:35AM
(#50390192)
>When did y'all stop using some basic sense before writing? -_-
Yeah samesame:
-Compares a kernel with paint
-Uses a program with telemetry/spyware instead of installing on of the 1000s alternatives
Re:MS Paint Remote Code Execution Vulnerability
by izacus on Friday November 06, 2026 @06:10AM
(#50390905)
It's a built-in tool of the OS, not some random spyware. Stop with the bizarre hyperbole.
Re:MS Paint Remote Code Execution Vulnerability
by BSDobelix on Friday November 06, 2026 @07:28AM
(#50391563)
>It's a built-in tool of the OS, not some random spyware
Oh no dont get me wrong, it's not random spyware, it's deliberately made spyware by Microsoft targeted at Windows Users.
Re:MS Paint Remote Code Execution Vulnerability
by trashb on Friday November 06, 2026 @06:12AM
(#50390916)
Great time to jump to the openbsd kernel!
Re:MS Paint Remote Code Execution Vulnerability
by Natsu on Friday November 06, 2026 @06:32PM
(#50399947)
[delayed]
Re:MS Paint Remote Code Execution Vulnerability
by Natsu on Friday November 06, 2026 @06:30PM
(#50399932)
[delayed]
Re:MS Paint Remote Code Execution Vulnerability
by pjmlp on Friday November 06, 2026 @03:43AM
(#50389747)
Windows Update and Store are slowly becoming the same, and Paint gets delivered via the store for quite some time, there was even some drama related to it.
https://interestingengineering.com/culture/rip-microsoft-pai...