upvote
Doesn't seem to be:

> An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required.

reply
That looks like a placeholder text they drop in the FAQ for anything tagged as RCE.

Until somebody connects the dots on how the heck MS Paint is accessible over the network, I'm gonna maintain some pretty intense skepticism here.

> https://share.google/aDP2ac9j5AmB13QRo

reply
Okay, but then the UI:N? Without user interaction, how do you even perform an exploit in a way that doesn't qualify as remote?
reply