A fix for CVE-2026-83844, a remote code execution flaw in Windows Paint, is now in the Microsoft Store. Paint gets this fix only through a Store update, not through Windows updates. The fixed build, 11.2609.401.0, was the newest Paint build in all ten countries The Hacker News checked today.
Microsoft Paint RCE Fix Now Available, but Windows Update Won't Deliver It
About this summary. This is a short excerpt from the description that The Hacker News published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://thehackernews.com/2026/11/microsoft-paint-rce-fix-now-available.html
Source attribution: headline and facts are from The Hacker News (thehackernews.com). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
Microsoft Paint RCE CVE-2026-83844 Raises Store Update Questions
Microsoft has disclosed CVE-2026-83844, an out-of-bounds read in the Microsoft Store version of Paint that could allow remote code execution. Microsoft rates the…
What exploited vulnerabilities have in common: A data-driven analysis of real-world attacks
Classifying the vulnerability landscape Vulnerabilities exploited in the wild Where defenders should focusPatching is slow, while exploitation is fast Impact, exposure…
CVE-2026-83519 Windows Error Reporting Remote Code Execution Vulnerability
Updated an acknowledgement. This is an informational change only.
CVE-2026-83862 Windows Network Load Balancing Remote Code Execution Vulnerability
Corrected the CVSS Attack Vector metric from Network (AV:N) to Adjacent (AV:A) to reflect the requirement for Layer 2 network adjacency. The CVSS base score has…
CVE-2026-69902 Windows NTFS Remote Code Execution Vulnerability
Updated an acknowledgement. This is an informational change only.
CVE-2026-83782 Windows Shell Remote Code Execution Vulnerability
Updated an acknowledgement. This is an informational change only.