News for hackers. Stuff that matters.
Re:MS Paint Remote Code Execution Vulnerability by greyhound1 on Thursday November 05, 2026 @05:35PM (#50385483)
Had to go to Microsoft Store to get the fixed version, Windows Update didn't show anything.
Re:MS Paint Remote Code Execution Vulnerability by neuroelectron on Thursday November 05, 2026 @06:02PM (#50385771)
Wow, what a weird confluence of events
Re:MS Paint Remote Code Execution Vulnerability by pixelpoet on Thursday November 05, 2026 @06:58PM (#50386322)
If MS knew it would drive people to actually use their app store, they would have created the CVE themselves.
Re:MS Paint Remote Code Execution Vulnerability by nik282000 on Friday November 06, 2026 @08:58AM (#50392363)
They kinda did.
Re:MS Paint Remote Code Execution Vulnerability by gadrev on Thursday November 05, 2026 @07:27PM (#50386567)
Did the same and it quickly updated itself when I went into the "Paint" page (but I had to go there first). No indication of what just happened a few seconds later.
Re:MS Paint Remote Code Execution Vulnerability by ManuelKiessling on Thursday November 05, 2026 @07:48PM (#50386737)
For a split second, I visualized you walking into a brick and mortar Microsoft Store to get your security update done on your laptop, and somewhere in the middle of that split second I caught myself thinking „typical Microsoft“, and then I came to my senses.
Re:MS Paint Remote Code Execution Vulnerability by supriyo-biswas on Friday November 06, 2026 @12:06AM (#50388440)
For some reason, I had the same idea.
Re:MS Paint Remote Code Execution Vulnerability by alt227 on Friday November 06, 2026 @04:48AM (#50390287)
You made a slip. Thats Apple you are talking about, and it actually happens.
Re:MS Paint Remote Code Execution Vulnerability by IAmBroom on Friday November 06, 2026 @09:29AM (#50392705)
If brick and mortar Apple stores are staffed by "Geniuses"...
Re:MS Paint Remote Code Execution Vulnerability by lossyalgo on Thursday November 05, 2026 @09:24PM (#50387351)
[delayed]
Re:MS Paint Remote Code Execution Vulnerability by aDyslecticCrow on Friday November 06, 2026 @09:49AM (#50392982)
or block ms paint aswell.
Re:MS Paint Remote Code Execution Vulnerability by Natsu on Friday November 06, 2026 @12:09AM (#50388451)
[delayed]
Re:MS Paint Remote Code Execution Vulnerability by iririririr on Friday November 06, 2026 @12:38AM (#50388611)
why get package after something that is obviously a malicious backdoor?

If I still mamaged any windows host, i would be deploying a remove-package script asap to the entire fleet.

Re:MS Paint Remote Code Execution Vulnerability by izacus on Friday November 06, 2026 @02:50AM (#50389381)
What kind of nonsense are you writing here right now? When the next Linux kernel CVE happens, you'll also delete all the kernels from your fleete because they're a malicious backdoor?

When did y'all stop using some basic sense before writing? -_-

Re:MS Paint Remote Code Execution Vulnerability by BSDobelix on Friday November 06, 2026 @04:35AM (#50390192)
>When did y'all stop using some basic sense before writing? -_-

Yeah samesame:

-Compares a kernel with paint

-Uses a program with telemetry/spyware instead of installing on of the 1000s alternatives

Re:MS Paint Remote Code Execution Vulnerability by izacus on Friday November 06, 2026 @06:10AM (#50390905)
It's a built-in tool of the OS, not some random spyware. Stop with the bizarre hyperbole.
Re:MS Paint Remote Code Execution Vulnerability by BSDobelix on Friday November 06, 2026 @07:28AM (#50391563)
>It's a built-in tool of the OS, not some random spyware

Oh no dont get me wrong, it's not random spyware, it's deliberately made spyware by Microsoft targeted at Windows Users.

Re:MS Paint Remote Code Execution Vulnerability by trashb on Friday November 06, 2026 @06:12AM (#50390916)
Great time to jump to the openbsd kernel!
Re:MS Paint Remote Code Execution Vulnerability by Natsu on Friday November 06, 2026 @06:32PM (#50399947)
[delayed]
Re:MS Paint Remote Code Execution Vulnerability by Natsu on Friday November 06, 2026 @06:30PM (#50399932)
[delayed]
Re:MS Paint Remote Code Execution Vulnerability by pjmlp on Friday November 06, 2026 @03:43AM (#50389747)
Windows Update and Store are slowly becoming the same, and Paint gets delivered via the store for quite some time, there was even some drama related to it.

https://interestingengineering.com/culture/rip-microsoft-pai...