Microsoft Paint RCE Fix Now Available, but Windows Update Won't Deliver It
Posted: Fri Nov 06, 2026 6:30 pm
A fix for CVE-2026-83844, a remote code execution flaw in Windows Paint, is now in the Microsoft Store. Paint gets this fix only through a Store update, not through Windows updates.
The fixed build, 11.2609.401.0, was the newest Paint build in all ten countries The Hacker News checked today.
The flaw is an out-of-bounds read that could let an attacker run code over a network. Microsoft rates it as Important, with a CVSS score of 8.1, and says that a successful attack requires a deep understanding of the target system. The flaw was not known to be exploited or publicly disclosed when the company published it on October 13.
Full article at:
https://thehackernews.com/2026/11/micro ... lable.html
Published Date: Nov 06, 2026
Vulnerabilities has been mentioned in this article:
CVE-2026-83844
The fixed build, 11.2609.401.0, was the newest Paint build in all ten countries The Hacker News checked today.
The flaw is an out-of-bounds read that could let an attacker run code over a network. Microsoft rates it as Important, with a CVSS score of 8.1, and says that a successful attack requires a deep understanding of the target system. The flaw was not known to be exploited or publicly disclosed when the company published it on October 13.
Full article at:
https://thehackernews.com/2026/11/micro ... lable.html
Published Date: Nov 06, 2026
Vulnerabilities has been mentioned in this article:
CVE-2026-83844