CVE-2026-70586

Heap-based buffer overflow in Windows Paint allows an unauthorized attacker to execute code over a network...

EUVD-2026-73086

Heap-based buffer overflow in Windows Paint allows an unauthorized attacker to execute code over a network...

CVE-2026-70586

CVE-2026-70586 is a heap-based buffer overflow in Windows Paint that allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability requires user interaction (e.g., opening a crafted file) but no prior privileges. Microsoft rates it CVSS 8.8 (HIGH) with high im...

Windows Paint Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Paint allows an unauthorized attacker to execute code over a network...