A pre-installed application on Windows 10 has a major security hole
First introduced as part of Microsoft's Creators Update in 2016, Paint 3D was originally intended as a replacement for Microsoft Paint that has shipped with the company's operating system since Windows 10.
However, the 3D modeling software is not as expected. That's why Paint and Paint 3D continue to exist side by side on Windows. This could change soon as Paint 3D was not included in the recently leaked Windows 11 build.
Although difficult to exploit, the recently discovered vulnerability, now patched by Microsoft, could be another reason Paint 3D's era may be buried.
Vulnerability in Paint 3D (CVE-2021-31946) could be exploited by an attacker to execute arbitrary code after a user accesses or opens a malicious file following security advice from ZDI.
However, to exploit this vulnerability, an attacker would first need to gain privilege escalation on a targeted system before convincing a user to open a malicious file or website.
Earlier this year, ZDI discovered this vulnerability using a technique known as fuzzing. In February, they reported their findings to Microsoft. Thankfully, security researchers have not observed the exploit in practice or in pre-existing POC code, which means Windows users are safe for now.
At the same time, Microsoft has also released a patch to address the vulnerability through the Microsoft Store.
If you haven't set up automatic updates in the Microsoft Store, you can also download the update manually.
We'll have to wait and see if Paint 3D is dropped in the next version of Windows.
You should read it
- Microsoft Paint - Download the latest Microsoft Paint here
- Replace the Paint 3D application with Paint Classic on Windows 10
- Uninstalling Paint will no longer be an 'impossible task'.
- Top 3 favorite hand-held paint sprayers today
- Microsoft continues to support Paint on Windows 10
- Paint on Windows 11 has new improvements, starting to roll out to the Dev channel
- Learn how to use Paint to edit photos on Windows
- Fix MS Paint not working on Windows
- Painter showed off painting with the top paint like Photoshop, who thought the people would show off 'good' equally
- Paint.NET 4.3.4 - Download Paint.NET 4.3.4 here
- Uninstall or reinstall the Paint 3D application on Windows 10
- Microsoft prepares to death Paint after 32 years of existence
Maybe you are interested
Microsoft Paint gets Generative AI tools
How to turn a photo into a painting using the Generative Fill function in Photoshop
The easiest way to start digital painting
Try being an artist with MidJourney painting AI
Microsoft has announced the 'death date' of the Paint 3D application for Windows 11
How to open Paint on Windows 10, 8, 7, open the Paint tool