MeridianMeridian

Microsoft Releases New Windows Paint Version to Address Critical RCE Vulnerability CVE-2026-83844

Microsoft has issued an updated version of Windows Paint to resolve a serious remote code execution vulnerability identified as CVE-2026-83844. The flaw allows an unauthenticated attacker to execute arbitrary code on vulnerable systems by sending a specially crafted packet, with no user interaction required. The vulnerability was first addressed in a security update on 13 October, but gained wider attention this week after system administrators on Reddit reported difficulties obtaining the patch. The National Cyber Security Centrum (NCSC) warned that successful exploitation could enable attackers to install programs, view data, or fully compromise affected systems. Microsoft now recommends that users upgrade to Windows Paint version 11.2609.401.0 or verify that the version has been installed automatically. The company updated its security bulletin for CVE-2026-83844 yesterday evening to confirm the new release fully mitigates the issue.

Security.NLTranslated from NL

Read at source

Microsoft has released a new version of Windows Paint to address a critical remote code execution vulnerability tracked as CVE-2026-83844. The flaw permits an unauthenticated attacker to execute arbitrary code on affected systems without requiring any user interaction.

According to Microsoft and the Nationaal Cyber Security Centrum (NCSC), the vulnerability can be triggered simply by opening a specially crafted image in Windows Paint. Successful exploitation allows an attacker to run commands, install programs, access sensitive data, or take full control of the compromised system.

The security update containing the fix was initially published on 13 October. However, the issue only entered public discussion this week after administrators on Reddit complained about difficulties downloading the patch through normal channels. Microsoft updated its security bulletin for CVE-2026-83844 yesterday evening to announce that the vulnerability is now fully resolved in the new release.

Users are advised to update to Windows Paint version 11.2609.401.0 or confirm that this version has already been installed via automatic updates.

MicrosoftWindows PaintCVE-2026-83844
ShareXFacebookLinkedInReddit
Meridian digestThe week's most consequential security stories, distilled into one briefing.See the digest

More in Vulns & Exploits

SonicWall Warns of SonicOS Flaw Allowing SAML MFA Bypass in SSL-VPN
Vulns & Exploits

SonicWall Warns of SonicOS Flaw Allowing SAML MFA Bypass in SSL-VPN

SonicWall has issued a security advisory for a vulnerability in its SonicOS operating system that powers the company's firewalls. The flaw, tracked as CVE-2026-19868, enables attackers who already possess valid SSL-VPN credentials to circumvent SAML authentication controls and the multi-factor authentication enforced by SAML. The company released patches to address the issue and stated it investigated a report indicating possible exploitation. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has also confirmed active abuse of the vulnerability. No technical details about the attacks or their timeline have been disclosed. SonicWall urges customers to apply the updates immediately due to the associated risks.

Security.NLNov 7, 2026Translated from NL

QNAP Warns Plex Users of Active Plex2Shell Exploitation on NAS Devices
Vulns & Exploits

QNAP Warns Plex Users of Active Plex2Shell Exploitation on NAS Devices

QNAP has issued an urgent advisory to users running Plex Media Server on their NAS systems regarding a set of four vulnerabilities collectively known as Plex2Shell. The flaws allow unauthenticated remote attackers to take full control of vulnerable Plex instances. Plex has confirmed that the vulnerabilities are being actively exploited on a large scale following the public release of proof-of-concept code on 16 October. Compromised servers are being infected with cryptominers and proxy software that enables further malicious activity from the affected systems. QNAP recommends immediate installation of Plex version 1.43.3.10861 or newer through the App Center and advises additional hardening steps for internet-exposed deployments.

Security.NLNov 6, 2026Translated from NL

Attackers Exploit OpenSSH 'SSHole' Flaw on musl Systems to Deploy Botnets and Cryptominers
Vulns & Exploits

Attackers Exploit OpenSSH 'SSHole' Flaw on musl Systems to Deploy Botnets and Cryptominers

Cybersecurity firms have reported active exploitation of a vulnerability in OpenSSH affecting systems that use the musl library, including Alpine Linux, OpenWRT, Buildroot, and Yocto. The flaw, nicknamed 'SSHole', allows attackers to bypass authentication on accounts configured with no password by supplying a password longer than 256 characters. The issue occurs when OpenSSH runs on musl without PAM, with password authentication enabled and specific account configurations present. OpenSSH 10.6p2 was released on November 5, 2026, with a mitigation after the vulnerability was disclosed on November 4. Initial attacks began within nine hours of the patch release, with observed activity limited to botnet recruitment and cryptominer installation. The Dutch NCSC recommends restricting SSH exposure and disabling password authentication where possible.

Security.NLNov 6, 2026Translated from NL