VDB

GCVE-110-NCSC-2026-470

GCVE-110-NCSC-2026-470
Advisory PublishedCVSS 8.1/10
Vulnetix · Advisory published November 6, 2026
An out-of-bounds read vulnerability in Windows Paint allows unauthorized remote code execution, posing a significant security risk.

Weaknesses (CWE)

CWE-125Out-of-bounds Read

Risk Scores

CVSS 3.1
8.1/10
High · CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersionsPlatforms
Microsoftvers:unknown/*——

References

advisory
advisory
advisory

Browse GCVE Records

1,010 records in the GCVE database · Updated November 6, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Lookup Community · 50/day Open Lookup ›