MS Paint Remote Code Execution Vulnerability

Re:MS Paint Remote Code Execution Vulnerability by what_hn on Thursday November 05, 2026 @06:34PM (#50386125)

Paint opens a port?

[ Parent | on HN ]

Re:MS Paint Remote Code Execution Vulnerability by matt123456789 on Thursday November 05, 2026 @08:31PM (#50387034)

Yes, when it launches, it opens a telnet server so that bill gates can log in and type all the colors for you to use, like #000000, #000001, etc

[ Parent | on HN ]

Re:MS Paint Remote Code Execution Vulnerability by lelandfe on Thursday November 05, 2026 @11:10PM (#50388074)

By all means, continue.

[ Parent | on HN ]

Re:MS Paint Remote Code Execution Vulnerability by mattstir on Friday November 06, 2026 @08:47AM (#50392246)

Presumably as part of the generative AI stuff they crammed into it? They've been hilariously cagey about the details here which makes me think it has to be AI-feature related

[ Parent | on HN ]

Re:MS Paint Remote Code Execution Vulnerability by sigmar on Friday November 06, 2026 @09:26AM (#50392666)

Not sure what you think is "hilariously cagey", but why would they only be "cagey" if the bug was from ai-features? Also it says paint versions are "affected from 11.0.0.0 before 11.2605.91.0" which I take to mean the bug has been there since Windows 11 was released in 2021

[ Parent | on HN ]