Critical Security Vulnerability Discovered in Windows Paint

Microsoft Paint, the widely used drawing application in Windows, has a critical security vulnerability classified as CVE-2026-83844. This flaw allows attackers to inject malicious code without requiring any action from the user. Microsoft rated the threat with a high score of 8.1 out of 10. On October 13, 2026, Microsoft released a patch to address the security issue.

Reports indicate that this patch did not reach all users, resulting in many continuing to use the insecure version of the application. The version prior to the patch was numbered 11.2603.251.0, while the recommended secure version is 11.2609.401.0. The discovery of the inadequate distribution of the patch was made by the website Windows Latest, which checked the installed version of Paint on various systems and found that many users had not received the updated version. Installed antivirus programs also indicated that Paint was not patched, further raising security concerns.

It remains unclear whether the issue lies in the distribution of the update or in the Paint application itself. Users reported that automatic updates in the Windows settings were correctly enabled, complicating the situation further. Microsoft has yet to provide an official explanation for the reasons behind the inadequate distribution of the patch. To check the installed version of Paint, users can enter the command powershell Get-AppxPackage -Name Microsoft.Paint | Select-Object Name, Version in Windows PowerShell. Alternatively, the version number can also be retrieved through the settings under "Installed Apps," although the "Advanced Options" may need to be enabled.

The security vulnerability in Paint is not the first flaw discovered in Microsoft products. Historically, security vulnerabilities in software are widespread, and Microsoft has regularly released patches to address them in the past. However, the current situation shows that not all users automatically benefit from these security updates. Microsoft recommends downloading the latest version of Paint directly from the Microsoft Store to ensure that the security vulnerability is closed. This could be particularly important for users of Windows 11 Home, who may not have access to all features of the Pro version.

The CVE-2026-83844 vulnerability affects not only individuals but could also pose risks to businesses that rely on Microsoft Paint for various applications. An inadequately patched system can lead to significant security risks, especially at a time when cyberattacks are becoming increasingly complex. Microsoft has announced that further information on addressing the security vulnerability and the distribution of the patch will be provided in the coming weeks. Users should regularly update their software and ensure they have the latest versions installed to protect against potential threats. The recommended version of Paint that is supposed to close the security vulnerability is 11.2609.401.0. Users should have this version installed by the end of November 2026 at the latest to ensure their systems are protected.