Hacker News
points by Natsu 2 days ago | 0 comments
I did the same, then ran:

Get-AppxPackage -Name Microsoft.Paint | Select-Object Name, Version

But I can only get Microsoft.Paint 11.2609.401.0 and Microsoft has said different things in different places, so it's not even clear if this has the fix or not.

This article has more info on the confusion they're causing: https://windowsforum.com/news/cve-2026-83844-windows-11-pain...

[–] iririririr 2 days ago
why get package after something that is obviously a malicious backdoor?

If I still mamaged any windows host, i would be deploying a remove-package script asap to the entire fleet.

[–] Natsu 1 day ago
Get-AppxPackage gives you the currently-installed packages for a Windows profile in PowerShell. It does not, in fact, download or install anything.

The whole command I gave gives you the currently installed version of MS Paint so you can see if you're already vulnerable or not.

[–] izacus 2 days ago
What kind of nonsense are you writing here right now? When the next Linux kernel CVE happens, you'll also delete all the kernels from your fleete because they're a malicious backdoor?

When did y'all stop using some basic sense before writing? -_-

[–] Natsu 1 day ago
Maybe we can blame PowerShell a bit for confusing names on this one. Get-AppxPackage does not download or install anything, contrary to what one might wrongly assume.
[–] trashb 2 days ago
Great time to jump to the openbsd kernel!
[–] BSDobelix 2 days ago
>When did y'all stop using some basic sense before writing? -_-

Yeah samesame:

-Compares a kernel with paint

-Uses a program with telemetry/spyware instead of installing on of the 1000s alternatives

[–] izacus 2 days ago
It's a built-in tool of the OS, not some random spyware. Stop with the bizarre hyperbole.
[–] BSDobelix 2 days ago
>It's a built-in tool of the OS, not some random spyware

Oh no dont get me wrong, it's definitely not some random spyware, it's deliberately made by Microsoft targeted at Windows Users who cant buy a Enterprise License.