Microsoft Paint RCE Fix Now Available, but Windows Update Won't Deliver It

A fix for CVE-2026-83844, a remote code execution flaw in Windows Paint, is now available in the Microsoft Store. According to the report, Paint receives this fix only through a Store update and not through Windows Update.

The report says the fixed build is 11.2609.401.0. It was the newest Paint build in all ten countries that The Hacker News checked.

The flaw is an out-of-bounds read. The report says it could let an attacker run code over a network. The source text cuts off before stating Microsoft's severity rating, so this brief does not give one.