Microsoft Paint RCE fix remains hard to verify across Windows PCs

Feeds.4Sysops •IT News • November 5, 2026

Microsoft says Paint version 11.2609.401.0 or later fixes CVE-2026-83844, but reports indicate the update may not appear in the Microsoft Store even when automatic updates are enabled. The Windows 11 app has an 8.1-severity remote-code-execution flaw, so administrators should check Paint’s installed version rather than assume Windows or Store updates have resolved it. Source

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Windows 11 Paint Vulnerability CVE-2026-83844: Patch Availability Issues Persist Microsoft disclosed a high-severity vulnerability in Windows Paint, tracked as CVE-2026-83844, on October 13, 2026. The flaw allows remote code execution via an out-of-bounds read, affecting versions prior to 11.2605.91.0. Despite Microsoft stating that a patch is available, users and IT administrators report difficulties in obtaining the updated version through the Microsoft Store, often finding older versions instead. The vulnerability has a CVSS score of 8.1, indicating a high severity. While there are no confirmed reports of exploitation, the potential for remote code execution without user interaction raises significant concerns. Administrators are advised to verify the installed version of Paint directly, as reliance on the Store for updates may not be sufficient. 29 sources 58

Extracted Entities

CVEs (1)

CVE-2026-83844

Platforms (1)

Windows