not sure if the last time was also a RCE specifically, but this by far isn't the first "this shouldn't even be remotely possible" CVE in MS Paint