First screen, captured 8 days ago. Open the video.

MS Paint Remote Code Execution Vulnerability

What HN thinks

Thousands of engineers simultaneously asking why a bitmap editor needs a network stack.

Bafflement that Paint is networked
Many can't fathom how Paint could be exploitable over the network with no user interaction, and blame Copilot/AI features bolted onto a simple app.
Probably boilerplate or misfiled
Skeptics suspect Microsoft pasted its standard wormable-RCE text, and the real vector is a malicious file or a MITM on Paint's outbound connections (hence 'High' complexity).
Just use old or alternative Paint
Several keep the XP-era mspaint.exe, run it under Wine, or switch to jspaint, noting the old Win32 version appears unaffected.

Consensus: Most agree the published details make little sense and that feature creep (especially AI) in once-simple apps like Paint and Notepad is expanding the attack surface; the fix comes via the Microsoft Store, not Windows Update.

Recommended in the comments

JS Paint (tool): Offers the simple old Paint experience without the new networked features.
Metapad ↗ (tool): Suggested as a better lightweight Notepad alternative.
KolourPaint (tool): Mentioned as a Linux Paint alternative, though with rendering trail glitches.

Summarised by Claude from the comment thread 7 days ago.

Points: 688
Comments: 256
Best rank: #2
Posted: 2026-11-05 by kuberwastaken
Category: Security

cve microsoft-paint windows remote-code-execution out-of-bounds-read microsoft

All captures:

Full page

Captured 8 days ago. Click for the whole screenshot.

Looks similar

Screenshot of cve.org: Windows Notepad App Remote Code Execution Vulnerability

Windows Notepad App Remote Code Execution Vulnerability (cve.org)

737 points by riffraff 9 months ago | 450 comments

CVE record CVE-2026-20841 published by Microsoft describing a remote code execution vulnerability in the Windows Notepad app.

cve windows-notepad remote-code-execution microsoft

Screenshot of github.com: Promethevs: Full DeepSeek-v4.1-Flash-1017, locally, on 12GB of VRAM

Promethevs: Full DeepSeek-v4.1-Flash-1017, locally, on 12GB of VRAM (github.com)

4 points by ar-nelson 7 days ago | 0 comments

GitHub repository for PROMETHEVS, an engine that runs the full 510 GB DeepSeek-V4.1-Flash model on a PC with 64 GB RAM and a 12 GB GPU using compress-then-correct decoding.

deepseek local-llm llm-inference quantization

Screenshot of github.com: Show HN: SafeScript, a safe version of JavaScript for executing untrusted code

Show HN: SafeScript, a safe version of JavaScript for executing untrusted code (github.com)

4 points by EGreg 5 days ago | 0 comments

GitHub repository for SafeScript, a safe subset of JavaScript that compiles to JS and PHP for sandboxed execution of untrusted code.

javascript sandboxing safescript untrusted-code

Screenshot of github.com: Show HN: A 15 MB self-hosted Netflix and Spotify for your media server

Show HN: A 15 MB self-hosted Netflix and Spotify for your media server (github.com)

145 points by CoderLuii 3 days ago | 131 comments

GitHub repository for HolyArrs, an AGPL-licensed self-hosted Go app that manages and streams your shows, movies, music and downloads in one place.

self-hosted media-server homelab go

Screenshot of github.com: Show HN: Reflota – Open-source data recovery for NTFS/FAT disks with phased copy

Show HN: Reflota – Open-source data recovery for NTFS/FAT disks with phased copy (github.com)

15 points by christ_dev 12 hours ago | 2 comments

GitHub repository for Reflota, an open-source, read-only Windows tool for recovering deleted and lost files from NTFS, FAT and exFAT disks, with phased disk imaging.

data-recovery ntfs fat32 exfat

Screenshot of wadetregaskis.com: macOS 27 does not support CoreStorage volumes

macOS 27 does not support CoreStorage volumes (wadetregaskis.com)

113 points by colejohnson66 10 days ago | 94 comments

Blog post describing how macOS 27 Golden Gate fails to mount, convert, or erase CoreStorage encrypted HFS+ volumes, with debugging details and a workaround.

macos corestorage hfs-plus apfs

Full page

Looks similar

Windows Notepad App Remote Code Execution Vulnerability (cve.org)

Promethevs: Full DeepSeek-v4.1-Flash-1017, locally, on 12GB of VRAM (github.com)

Show HN: SafeScript, a safe version of JavaScript for executing untrusted code (github.com)

Show HN: A 15 MB self-hosted Netflix and Spotify for your media server (github.com)

Show HN: Reflota – Open-source data recovery for NTFS/FAT disks with phased copy (github.com)

macOS 27 does not support CoreStorage volumes (wadetregaskis.com)

Related stories

Windows Notepad App Remote Code Execution Vulnerability (cve.org)

MS Paint and Photos inivisibly watermark even locally generated output with GUID (xusheng.dev)

GitHub RCE Vulnerability: CVE-2026-3854 Breakdown (wiz.io)

CVE-2026-111943: Compromised Intermediate Certificate Authority (nvd.nist.gov)

OpenClaw privilege escalation vulnerability (nvd.nist.gov)

TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8 (atlasum.net)