Risitas Recounts a Critical RCE in Microsoft Paint

Share
New video
9/8/2026
On 08 Sep 2026, Microsoft announced an RCE in Microsoft Paint (CVE-2026-70586)

0 Comments

Be the first to leave a comment.

▸Show captions (47)
00:00 - 00:05My boss calls me over and says, "Risitas!
00:05 - 00:07"I need you to review this month's Patch Tuesday!"
00:07 - 00:10"Researchers have been throwing the chancla
00:11 - 00:16at Microsoft lately." So, I start looking at the criticals and what do I find?
00:17 - 00:21A critical in Microsoft Paint
00:21 - 00:24-
00:29 - 00:31-
00:31 - 00:34Someone found an RCE in Paint!
00:38 - 00:40-
00:41 - 00:47Imagine waking up one day to find yourself ransomware'd
00:47 - 00:50Just for the investigation to find
00:50 - 00:56the initial entry point was Paint
00:58 - 00:59All because-
00:59 - 01:01-because someone
01:04 - 01:06opened a Paint attachment
01:06 - 01:08from "their kid"
01:13 - 01:14-
01:14 - 01:16No one
01:16 - 01:20would believe you!
01:21 - 01:27-
01:35 - 01:36-
01:36 - 01:39-
01:41 - 01:44Look, in seriousness
01:44 - 01:47This is a critical vuln
01:47 - 01:49and should be patched.
01:50 - 01:53Just imagine...Paint!
01:54 - 01:56-
01:56 - 01:58I can't stop laughing!
01:58 - 02:02The thought of someone getting pwnd
02:05 - 02:07by an RCE in Paint!
02:10 - 02:11-
02:11 - 02:13Paint!
02:15 - 02:17Everyday after school,
02:17 - 02:20I'd draw shit in Paint
02:21 - 02:28And now its 24 bits can compromise any Windows system launched since 2019
02:29 - 02:30Any Windows system?
02:30 - 02:32Any since 2019
02:36 - 02:39That copilot feature's...
02:40 - 02:42...copilot's really something
02:50 - 02:55Paint's had so many vulns since Satya forced AI into Paint
02:56 - 02:58I thought Copilot was added in 2025?
02:58 - 03:04It was, but DALL-E and others have been
03:04 - 03:09added since 2023
03:09 - 03:11-
03:16 - 03:20And since then Paint's had 3 RCEs
03:23 - 03:26I can't even imagine
03:31 - 03:36getting breached by Paint