Windows 11’s Paint has a no-click hacking bug, and even with auto-updates on, you may not have the fix
AI-summarised brief · reviewed before publication
Microsoft disclosed a critical Paint vulnerability (CVE‑2026‑83844) on October 13, allowing remote code execution via an out‑of‑bounds read. The patch, released through the Microsoft Store, requires Paint version 11.2609.401.0 or newer. Users with auto‑updates enabled still see older versions, and many IT admins report the update is missing from the Store. The flaw is rated “Important” (8.1/10), yet no wild exploitation has been reported. Microsoft advises installing the latest Paint update regardless of version discrepancies.
💡 Why It Matters
- · The bug shows that even with system updates, app‑level patches can fail to surface, exposing users to remote attacks.
- · It underscores the need for vigilant app‑specific update checks beyond OS updates.