Microsoft Paint RCE Fix Now Available, but Windows Update Won't Deliver It
· thehackernews.com · popularity 21/100 · 0 similar stories today · Mobile Apps & Software Tools (Technology & Consumer Electronics)
Read the original at thehackernews.com →
Summary
A fix for CVE-2026-83844, a remote code execution flaw in Windows Paint, is now in the Microsoft Store. Paint gets this fix only through a Store update, not through Windows updates. The fixed build, 11.2609.401.0, was the newest Paint build in all ten countries The Hacker News checked today. The flaw is an out-of-bounds read that could let an attacker run code over a network. Microsoft rates
Found in: The Hacker News. Rating basis: single outlet; outlet tier 2 (unlisted); 1 feeds; feed position 1.