windowslatest.com
Windows 11’s Paint has a no-click hacking bug, and even with auto-updates on, you may not have the fix
Microsoft disclosed a critical Paint vulnerability (CVE‑2026‑83844) on October 13, allowing remote code execution via an out‑of‑bounds read. The patch, released through the Microsoft Store, requires Paint version 11.2609.401.0 or newer. Users with auto‑updates enabled still see older versions, and many IT admins report the update is missing from the Store. The flaw is rated “Important” (8.1/10), yet no wild exploitation has been reported. Microsoft advises installing the latest Paint update regardless of version discrepancies.