Microsoft Paint contains a remote code execution vulnerability with a CVSS score of 8.1. Microsoft released a fix in October, but many administrators are unable to obtain the patched version. There is also confusion regarding the correct version number.