CybersecurityUpdated November 6
Microsoft's Paint RCE fix is in the Store.
Paint's update path is the part worth noticing. The Hacker News reported on November 6, 2026, that a fix for CVE-2026-83844 was available in the Microsoft Store, and that Paint gets this fix only through a Store update—not Windows Update. The outlet describes the flaw as an out-of-bounds read that could let an attacker run code over a network. It also checked Paint in ten countries that day; build 11.2609.401.0 was the newest one in all ten. So the fix is there, but anyone checking Windows Update for it is looking in the wrong place.
1 publisher1 report
Coverage started November 6
Key Actors
- Microsoft
