CVE Catalog
CVE-2026-70586
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk0.82%
55th percentile - higher than 55% of all known CVEs
Summary
Heap-based buffer overflow in Windows Paint allows an unauthorized attacker to execute code over a network.
Risk Assessment
A remote attack could lead to system compromise without authentication, posing a serious threat to data confidentiality and integrity.
Recommendation
Install the latest Windows security updates to remediate this vulnerability.
Other vulnerabilities in Windows Paint
Original NVD description (English source)
Heap-based buffer overflow in Windows Paint allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS