CVE-2026-83844: Microsoft Paint RCE Flaw Fixed via Microsoft Store

# CVE-2026-83844: Microsoft Paint RCE Flaw Fixed via Microsoft Store

https://gcdradar.vercel.app/incidents/cve-2026-83844-microsoft-paint-rce-flaw-fixed-via-microsoft · AIR-2026-1810 · live

- Lane: Patch now
- Severity: 2 (Disclosed vulnerability): Disclosed vulnerability with a patch available through the Microsoft Store.
- Fix status: Patched
- First reported: 2026-11-06
- AI role: No AI role
- Products: Microsoft Paint
- CVE ids: CVE-2026-83844

## Summary

A remote code execution flaw in Microsoft Paint allows attackers to run code over a network via an out-of-bounds read. Microsoft has released a patch available through the Microsoft Store rather than Windows Update.

## What to do

Update Microsoft Paint via the Microsoft Store to version 11.2609.401.0 or later.

## Affected and fixed versions

- Affected: Microsoft Paint prior to build 11.2609.401.0
- Fixed in: Microsoft Paint 11.2609.401.0

## Latest updates

- 2026-11-06: Microsoft Paint RCE Fix Now Available, but Windows Update Won't Deliver It (https://thehackernews.com/2026/11/microsoft-paint-rce-fix-now-available.html)

## Sources

- 2026-11-06 The Hacker News: Microsoft Paint RCE Fix Now Available, but Windows Update Won't Deliver It https://thehackernews.com/2026/11/microsoft-paint-rce-fix-now-available.html
- 2026-11-09 Dark Reading: Microsoft Fixes RCE Bug in Windows Paint After Weeks of Confusion https://darkreading.com/application-security/microsoft-rce-bug-windows-paint-confusion

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.