Microsoft Paint RCE Fix Now Available, but Windows Update Won't Deliver It

A fix for CVE-2026-83844, a remote code execution flaw in Windows Paint, is now in the Microsoft Store. Paint gets this fix only through a Store update, not through Windows updates. The fixed build, 11.2609.401.0, was the newest Paint build in all ten countries The Hacker News checked today. The flaw is an out-of-bounds read that could let an attacker run code over a network. Microsoft rates

آسیب‌پذیری و روز صفر سیستم‌عامل
خواندن متن کامل در The Hacker News درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←
Ubuntu Security Notices

USN-8952-2: Tornado regression

USN-8952-1 fixed vulnerabilities in Tornado. Unfortunately that update was incomplete due to an incomplete fix for CVE-2026-103263, which broke static file serving for applications that subclass Tornado's StaticFileHandler, such as Jupyter, and could introduce a regression. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that Tornado did not properly han…

CyberInsider

Mullvad Browser 16.0 switches DNS to Quad9, adds window title privacy

Mullvad Browser 16.0 introduces a privacy setting that keeps other apps from reading webpage titles through the browser’s window name. The release also switches encrypted DNS to Quad9, reorganizes the settings menu, and adds native support for 64-bit ARM Linux systems. Mullvad detailed the changes on November 6, following the October 29 release of version … The post Mullvad Browser 16.0 switches DNS to Quad9, adds wi…