Microsoft heeft een kwetsbaarheid verholpen in Windows Paint. De kwetsbaarheid betreft een out-of-bounds read in Microsoft Windows Paint (CWE-125), waardoor een aanvaller onder specifieke omstandigheden willekeurige code kan uitvoeren op het getroffen systeem.
NCSC-2026-0470 [1.00] [M/H] Kwetsbaarheid verholpen in Windows Paint van Microsoft
About this summary. This is a short excerpt from the description that NCSC-NL published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://advisories.ncsc.nl/advisory?id=NCSC-2026-0470
Source attribution: headline and facts are from NCSC-NL (advisories.ncsc.nl). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
NCSC-2026-0423 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Windows
Microsoft heeft 1159 kwetsbaarheden verholpen in Windows. Het voert te ver om iedere kwetsbaarheid te benoemen. De 53 ernstigste kwetsbaarheden, met een CVSS score van 9…
Microsoft Paint RCE CVE-2026-83844 Raises Store Update Questions
Microsoft has disclosed CVE-2026-83844, an out-of-bounds read in the Microsoft Store version of Paint that could allow remote code execution. Microsoft rates the…
What’s new in Microsoft Security: November 2026
Endpoint administrators need to keep elevated access accountable at scale. Security teams also need a clearer view of expert-led protection and a simpler way to deploy…
Mi Scusi, My SCSI: Abusing iSCSI Target Server
TL;DR – Enumerating the right connection strings lets you impersonate an iSCSI initiator and access whatever is stored on a shared virtual hard disk.
Fake-download campaign uses trojanized installers to deliver monetization payloads
Attack chain overview Mitigation and protection guidance Learn More Microsoft Threat Intelligence has identified an evolving fake-download campaign targeting users…
UEFI bootkit infected fully patched Windows machines. Is Microsoft to blame?
In 2023, malware tracked as BlackLotus became the first publicly documented in-the-wild UEFI bootkit capable of bypassing Secure Boot on fully updated Windows 11…