We've found another reason not to use Microsoft's Paint 3D – researchers

The vulnerability, designated CVE-2021-31946, could let miscreants execute arbitrary code on affected versions of Paint 3D when visiting a malicious page or opening a malicious file.