upvote

points

by gregschlom21 hours ago |
comments
upvoteby IanCal21 hours ago|
next
[-]
It mentions that it may rely on other services or security measures running- I wonder if there’s something like this hitting a firewall or av and then that calling out to paint to check file type or size out something like that?
reply
upvoteby zmmmmm18 hours ago|
prev|
next
[-]
It still makes it sound like the problem really is the other service that is letting a remote connection invoke some part of MS paint.
reply
upvoteby jdiff14 hours ago|
parent|
[-]
But why MS Paint? What functionality does it offer to another program to get called on specifically? And if this other service isn't calling on it specifically, what else can it be tricked into calling? And how many of those are also vulnerable to being stabbed in the back? The smaller interior holes are a problem, sure, but it seems like the CVE should be for the hull hole in that case.
reply
upvoteby nonethewiser21 hours ago|
prev|
next
[-]
Sounds like they just mean opening a file that you got from somewhere else.

>The CVSS score of 8.1 marks this as a high‑severity RCE. The EPSS score is not available, and the vulnerability is not listed in CISA’s KEV catalog. Based on the description, the likely attack vector is remote: an attacker can deliver the malicious file over a network connection, for example via Remote Desktop, file shares, or other network‑exposed services that allow users to open images. The lack of EPSS data does not diminish the threat posed by a known RCE, but it does make precise likelihood estimation difficult.

https://app.opencve.io/cve/CVE-2026-83844

reply
upvoteby advisedwang20 hours ago|
parent|
next
[-]
That's... that's not RCE though.
reply
upvoteby decidu0us90348 minutes ago|
parent|
[-]
Yes, it is.
reply
upvoteby autoexec20 hours ago|
parent|
prev|
next
[-]
Sounds like it might be automatically opening a file that was sent over the network without any user interaction.
reply
upvoteby eqvinox20 hours ago|
parent|
prev|
[-]
Reading tea leaves is still reading tea leaves, even if you make an AI do it… (which is what this is, judging by other things I've seen on opencve.io)
reply
upvoteby jdiff18 hours ago|
parent|
[-]
Yeah, OpenCVE also includes this:

> After applying the update, verify that the target Windows systems are running a version that includes the CVE fix before disabling legacy file‑open processing in Paint.

Which is complete nonsense. "Legacy file-open processing" isn't a real configurable option in Paint and this seems to suggest that enabling it is some sort of mitigation. The resolution is simply to update Paint.

reply
upvoteby Den_VR21 hours ago|
prev|
[-]
The direct implication is that current generations of ms paint are a “service over the network.” Probably a theoretically possible RPC end point of svchost.exe
reply