Microsoft Paint Zero-Click RCE Flaw Leaves Users Facing Patch Availability Gaps

Reported Nov 5, 2026 1d ago Reporters and administrators cannot obtain the documented patched Paint version Reporters found that Microsoft Store updates or fresh downloads left them with Paint versions 11.2603.251.0 or 11.2605.81.0, below Microsoft's documented patched-version threshold; IT administrators also reported being unable to obtain the update. The reports did not establish whether the discrepancy reflected a distribution problem or an incorrect version number in Microsoft's documentation. Windows 11’s Paint has a no-click hacking bug, and even with auto-updates on, you may not have the fix

Reporters and administrators cannot obtain the documented patched Paint version

Reporters found that Microsoft Store updates or fresh downloads left them with Paint versions 11.2603.251.0 or 11.2605.81.0, below Microsoft's documented patched-version threshold; IT administrators also reported being unable to obtain the update. The reports did not establish whether the discrepancy reflected a distribution problem or an incorrect version number in Microsoft's documentation.

Oct 31, 2026 6d ago Updated CVE record lists Paint 11.2605.91.0 as outside the affected range Microsoft updated the CVE-2026-83844 record on October 31, 2026; the record lists affected Paint versions from 11.0.0.0 up to, but excluding, 11.2605.91.0. That boundary differs from the previously documented fixed-version threshold of 11.2609.401.0, without establishing whether patch availability was resolved. CVE Record: CVE-2026-83844

Updated CVE record lists Paint 11.2605.91.0 as outside the affected range

Microsoft updated the CVE-2026-83844 record on October 31, 2026; the record lists affected Paint versions from 11.0.0.0 up to, but excluding, 11.2605.91.0. That boundary differs from the previously documented fixed-version threshold of 11.2609.401.0, without establishing whether patch availability was resolved.

Oct 13, 2026 24d ago Microsoft reports releasing the Paint security fix through the Microsoft Store Microsoft said it released a Paint security update through the Microsoft Store on October 13, 2026. Its documentation identifies version 11.2609.401.0 or newer as containing the fix for CVE-2026-83844. Windows 11’s Paint has a no-click hacking bug, and even with auto-updates on, you may not have the fix

Microsoft reports releasing the Paint security fix through the Microsoft Store

Microsoft said it released a Paint security update through the Microsoft Store on October 13, 2026. Its documentation identifies version 11.2609.401.0 or newer as containing the fix for CVE-2026-83844.

Oct 13, 2026 24d ago Microsoft discloses no-click remote code execution vulnerability in Paint On October 13, 2026, Microsoft disclosed CVE-2026-83844, an out-of-bounds read vulnerability in Paint with a severity score of 8.1. The flaw could allow unauthenticated remote code execution without user interaction, although exploitation is described as highly complex. Windows 11’s Paint has a no-click hacking bug, and even with auto-updates on, you may not have the fix

Microsoft discloses no-click remote code execution vulnerability in Paint

On October 13, 2026, Microsoft disclosed CVE-2026-83844, an out-of-bounds read vulnerability in Paint with a severity score of 8.1. The flaw could allow unauthenticated remote code execution without user interaction, although exploitation is described as highly complex.