Microsoft Paint remote code execution vulnerability (CVE-2026-83844)
Original title: MS Paint Remote Code Execution Vulnerability
Out-of-bounds read in Windows Paint allows remote code execution; Microsoft Paint versions 11.0.0.0 through 11.2605.91.0 affected.
Microsoft has published CVE-2026-83844 for an out-of-bounds read vulnerability in Windows Paint. An unauthorized attacker can execute code over a network. Affected versions range from 11.0.0.0 before 11.2605.91.0. The issue is tracked under CWE-125 with a CVSS score of 8.1.
- Microsoft Paint versions 11.0.0.0 to 11.2605.91.0 affected
- CVSS score 8.1
- CWE-125 out-of-bounds read
- Remote code execution over network
- Default status unknown
Impact: remote code execution
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-83844 | Network RCE via out-of-bounds read in Windows Paint | 7.0 | <1% | PoC ×7 |
From the original article
2 min read at cve.orgOpens in a new window Opens an external website Opens an external website in a new window This website utilizes technologies such as cookies to enable essential site functionality, as well as for analytics, personalization, and targeted advertising. Privacy Policy [Overview](https://www. cve.
By kuberwastaken · cve.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.