Penligent.Ai

Windows 11 Paint Vulnerability CVE-2026-83844: Patch Availability Issues Persist

First seen 5 Nov 2026, 16:48 UTC • •57.8

Article Content

1 / 39

Browse articles

ThreatCluster •November 6, 2026 at 06:44 UTC

•CVE-2026-83844 allows remote code execution in Windows Paint versions below 11.2605.91.0.
•Users report issues obtaining the patch despite having auto-updates enabled.
•Microsoft's documentation on the fixed version has discrepancies, complicating remediation efforts.

Microsoft disclosed a high-severity vulnerability in Windows Paint, tracked as CVE-2026-83844, on October 13, 2026. The flaw allows remote code execution via an out-of-bounds read, affecting versions prior to 11.2605.91.0. Despite Microsoft stating that a patch is available, users and IT administrators report difficulties in obtaining the updated version through the Microsoft Store, often finding older versions instead. The vulnerability has a CVSS score of 8.1, indicating a high severity. While there are no confirmed reports of exploitation, the potential for remote code execution without user interaction raises significant concerns. Administrators are advised to verify the installed version of Paint directly, as reliance on the Store for updates may not be sufficient.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 2d ago How this analysis works

Timeline

2026-10-13

CVE-2026-83844 disclosed

Microsoft disclosed a high-severity vulnerability in Paint allowing remote code execution.

Mallory.Ai

2026-10-13

Patch released

Microsoft announced a patch for Paint through the Microsoft Store, requiring version 11.2609.401.0 or newer.

Windowslatest

2026-10-31

CVE record updated

Microsoft updated the CVE record, changing the affected version threshold to 11.2605.91.0.

Penligent.Ai

2026-11-05

Users report update issues

Users and IT administrators reported being unable to obtain the patched version of Paint from the Microsoft Store.

En.Cryptonomist.Ch

Threat Graph

11 entities, 16 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (3)

Remote Code Execution
Zero-day Exploit
T1203 - Exploitation for Client Execution

Organization (1)

Microsoft

Vulnerability (2)

CVE-2026-83844
Windows 11 Paint Vulnerability

Weakness (1)

CWE-125 - Out-of-bounds Read

Affected Platform (2)

Windows
Windows 11

Tool (2)

Microsoft Paint
PowerShell

Relationships

Microsoft Paint exploits CVE-2026-83844
Microsoft Paint exploits Windows 11 Paint Vulnerability
PowerShell exploits CVE-2026-83844
PowerShell exploits Windows 11 Paint Vulnerability
CVE-2026-83844 targets Windows
CVE-2026-83844 targets Windows 11
Windows 11 Paint Vulnerability targets Windows
Windows 11 Paint Vulnerability targets Windows 11
Remote Code Execution targets Windows
Remote Code Execution targets Windows 11
Zero-day Exploit targets Windows
Zero-day Exploit targets Windows 11
T1203 - Exploitation for Client Execution targets Windows
T1203 - Exploitation for Client Execution targets Windows 11
CVE-2026-83844 related to Microsoft
CVE-2026-83844 related to CWE-125 - Out-of-bounds Read

Following this threat?

Track Microsoft and CVE-2026-83844 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Common questions

Which versions of Paint are affected?

All versions of Microsoft Paint prior to 11.2605.91.0 are affected by CVE-2026-83844.

Is there confirmed exploitation of this vulnerability?

No confirmed exploitation has been reported as of now, but the vulnerability poses a significant risk.

What steps should I take to secure my system?

Verify your installed version of Paint and ensure it is updated to at least 11.2605.91.0, checking directly rather than relying on the Microsoft Store.