thehackernews.com
Nov 7, 2026
Microsoft Paint RCE Fix Now Available, but Windows Update Won’t Deliver It
AI-summarised brief · reviewed before publication
Microsoft released a patch for the CVE‑2026‑83844 remote‑code‑execution flaw in Windows Paint, but the fix is only available through the Microsoft Store, not via Windows Update. The corrected build, 11.2609.401.0, is the latest Paint version in all ten countries examined. The vulnerability, rated Important with a CVSS score of 8.1, requires deep system knowledge and could allow attackers to run code over a network. The advisory notes that older builds remain vulnerable, and no workaround is provided.
💡 Why It Matters
- · The patch’s limited distribution channel leaves many users exposed, underscoring the need for vigilant app‑store monitoring and proactive removal of unnecessary software.
