{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/paint--11.2609.401.0/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:microsoft:paint:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.1,"id":"CVE-2026-83844"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Paint (\u003c 11.2609.401.0)"],"_cs_severities":["high"],"_cs_tags":["windows","vulnerability","rce"],"_cs_type":"advisory","_cs_vendors":["Microsoft"],"content_html":"\u003cp\u003eA vulnerability (CVE-2026-83844) exists in Microsoft Windows Paint, rated with a risk score of 8.1. An attacker can exploit this flaw by enticing a user to open a specially crafted image file within the application. Successful exploitation permits the execution of arbitrary commands, enabling unauthorized access, data manipulation, or the installation of malicious software. No active exploitation has been reported as of the date of the advisory.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows an attacker to gain control over the affected system, enabling the viewing, modification, or deletion of data and the execution of arbitrary programs.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate Microsoft Windows Paint to version 11.2609.401.0 or later via the Microsoft Store or standard Windows update channels.\u003c/li\u003e\n\u003cli\u003eIf the application version is unknown, conduct an inventory of installed software versions to identify systems requiring updates.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-06T11:17:20Z","date_published":"2026-11-06T11:17:20Z","id":"https://feed.craftedsignal.io/briefs/2026-11-windows-paint-rce/","summary":"A critical remote code execution vulnerability (CVE-2026-83844) in Microsoft Windows Paint allows attackers to execute arbitrary code when a victim opens a specially crafted image file.","title":"Microsoft Windows Paint: Remote code execution (CVE-2026-83844)","url":"https://feed.craftedsignal.io/briefs/2026-11-windows-paint-rce/"}],"language":"en","title":"CraftedSignal Threat Feed - Paint (\u003c 11.2609.401.0)","version":"https://jsonfeed.org/version/1.1"}