MS Paint 遠端程式碼執行漏洞
MS Paint Remote Code Execution Vulnerability
MS Paint 於 2026 年 10 月 13 日公佈了一個遠端程式碼執行漏洞,嚴重性評分 8.1。
- 受影響版本:從 11.0.0.0 起至 11.2605.91.0 之前。
AI 伴隨問答
針對這篇報導有疑問?可直接點選快捷問題或向 AI 追問背景脈絡與技術細節:
CVE Record: CVE-2026-83844
Opens in a new window Opens an external website Opens an external website in a new window
This website utilizes technologies such as cookies to enable essential site functionality, as well as for analytics, personalization, and targeted advertising. To learn more, view the following link: Privacy Policy
Manage Preferences
Common vulnerabilities and Exposures (CVE)
[](https://www.cve.org/)
[Overview](https://www.cve.org/About/Overview)[History](https://www.cve.org/About/History)[Process](https://www.cve.org/About/Process)[Related Efforts](https://www.cve.org/About/RelatedEfforts)[Metrics](https://www.cve.org/About/Metrics)
[Partner](https://www.cve.org/PartnerInformation/Partner)[List of Partners](https://www.cve.org/PartnerInformation/ListofPartners)
[Structure](https://www.cve.org/ProgramOrganization/Structure)[Program Relationship with Partners](https://www.cve.org/ProgramOrganization/ProgramRelationshipwithPartners)[Board](https://www.cve.org/ProgramOrganization/Board)[Working Groups](https://www.cve.org/ProgramOrganization/WorkingGroups)[Council of Roots](https://www.cve.org/ProgramOrganization/CouncilOfRoots)[CVE Numbering Authorities](https://www.cve.org/ProgramOrganization/CNAs)[Authorized Data Publishers](https://www.cve.org/ProgramOrganization/ADPs)
[Resources](https://www.cve.org/ResourcesSupport/Resources)[Glossary](https://www.cve.org/ResourcesSupport/Glossary)[FAQs](https://www.cve.org/ResourcesSupport/FAQs)
[CNAs](https://www.cve.org/ReportRequest/ReserveIDsPublishRecordsForCNAs)[Non-CNAs](https://www.cve.org/ReportRequest/ReportRequestForNonCNAs)
Search
CVE List Search Tips
lightbulb
|Provide Feedback
Survey opens in a new tab or window depending on browser settings
CVE-2026-83844
PUBLISHED
|
- * *
Collapse all
Required CVE Record Information
CNA: Microsoft Corporation
Updated: 2026-10-31
Published: 2026-10-13
Title: Windows Paint Remote Code Execution Vulnerability
Description
Out-of-bounds read in Windows Paint allows an unauthorized attacker to execute code over a network.
CWE 1 Total
CVSS 1 Total
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 8.1 | HIGH | 3.1 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
Product Status
Vendor
Microsoft
Product
Microsoft Paint
Versions 1 Total
Default Status: unknown
affected
- affected from 11.0.0.0 before 11.2605.91.0
References 1 Total
- msrc.microsoft.com: Windows Paint Remote Code Execution Vulnerability external sitevendor-advisory patch
Authorized Data Publishers
CISA-ADP
On this page
Policies & Cookies
Media
##### Social Media
githublinkedinblueskymastodonyoutubemedium
x-twitter icon for @CVEnew New CVE Recordsx-twitter icon for @CVEannounce CVE Announce
Contact
- CVE Program Support external site
- CNA Partners
- CVE Website Feedback Form external site
- CVE Website Support external site
Use of the CVE™ List and the associated references from this website are subject to the terms of use. CVE is sponsored by the U.S. Department of Homeland Security (DHS) external linkCybersecurity and Infrastructure Security Agency (CISA) external link. Copyright © 1999-2026, The MITRE Corporation external link. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.
Links that redirect to external websites will open a new window or tab depending on the web browser used.