跳到正文
Hacker News (official RSS)(cve.org)·· 4 小時前品質評分68

MS Paint 遠端程式碼執行漏洞

MS Paint Remote Code Execution Vulnerability

重點導讀

MS Paint 於 2026 年 10 月 13 日公佈了一個遠端程式碼執行漏洞,嚴重性評分 8.1。

  • 受影響版本:從 11.0.0.0 起至 11.2605.91.0 之前。

AI 伴隨問答

自備 Key 深度分析

針對這篇報導有疑問?可直接點選快捷問題或向 AI 追問背景脈絡與技術細節:

正文

CVE Record: CVE-2026-83844

Opens in a new window Opens an external website Opens an external website in a new window

This website utilizes technologies such as cookies to enable essential site functionality, as well as for analytics, personalization, and targeted advertising. To learn more, view the following link: Privacy Policy

Manage Preferences

Common vulnerabilities and Exposures (CVE)

Skip to main content

[![Image 1: CVE logo](blob:http://localhost/eee8b67b7a41a7248771ccf13c4e3d10)](https://www.cve.org/)

About

[Overview](https://www.cve.org/About/Overview)[History](https://www.cve.org/About/History)[Process](https://www.cve.org/About/Process)[Related Efforts](https://www.cve.org/About/RelatedEfforts)[Metrics](https://www.cve.org/About/Metrics)

Partner Information

[Partner](https://www.cve.org/PartnerInformation/Partner)[List of Partners](https://www.cve.org/PartnerInformation/ListofPartners)

Program Organization

[Structure](https://www.cve.org/ProgramOrganization/Structure)[Program Relationship with Partners](https://www.cve.org/ProgramOrganization/ProgramRelationshipwithPartners)[Board](https://www.cve.org/ProgramOrganization/Board)[Working Groups](https://www.cve.org/ProgramOrganization/WorkingGroups)[Council of Roots](https://www.cve.org/ProgramOrganization/CouncilOfRoots)[CVE Numbering Authorities](https://www.cve.org/ProgramOrganization/CNAs)[Authorized Data Publishers](https://www.cve.org/ProgramOrganization/ADPs)

Downloads

Resources & Support

[Resources](https://www.cve.org/ResourcesSupport/Resources)[Glossary](https://www.cve.org/ResourcesSupport/Glossary)[FAQs](https://www.cve.org/ResourcesSupport/FAQs)

Report/Request

[CNAs](https://www.cve.org/ReportRequest/ReserveIDsPublishRecordsForCNAs)[Non-CNAs](https://www.cve.org/ReportRequest/ReportRequestForNonCNAs)

Site Search

Search

CVE List Search Tips
lightbulb

|Provide Feedback
Survey opens in a new tab or window depending on browser settings

Site Search

CVE-2026-83844

PUBLISHED

View JSON

|

User Guide

  • * *

Collapse all

Required CVE Record Information

CNA: Microsoft Corporation

Updated: 2026-10-31

Published: 2026-10-13

Title: Windows Paint Remote Code Execution Vulnerability

Description

Out-of-bounds read in Windows Paint allows an unauthorized attacker to execute code over a network.

CWE 1 Total

Learn more

CVSS 1 Total

Learn more

ScoreSeverityVersionVector String
8.1HIGH3.1CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Product Status

Learn more

Vendor

Microsoft

Product

Microsoft Paint

Versions 1 Total

Default Status: unknown

affected

  • affected from 11.0.0.0 before 11.2605.91.0

References 1 Total

Authorized Data Publishers

Learn more

CISA-ADP

On this page

Policies & Cookies

Media

##### Social Media

githublinkedinblueskymastodonyoutubemedium

x-twitter icon for @CVEnew New CVE Recordsx-twitter icon for @CVEannounce CVE Announce

Contact

Use of the CVE™ List and the associated references from this website are subject to the terms of use. CVE is sponsored by the U.S. Department of Homeland Security (DHS) external linkCybersecurity and Infrastructure Security Agency (CISA) external link. Copyright © 1999-2026, The MITRE Corporation external link. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.

Links that redirect to external websites will open a new window or tab depending on the web browser used.

讀者討論

理性交流 · 即時討論