Microsoft Paint Receives Security Update via Store

A security update for Microsoft Paint is now available to fix the vulnerability CVE-2026-83844. This security flaw allows attackers to perform Remote Code Execution over a network. However, the update is not being distributed through regular Windows updates, but exclusively via the Microsoft Store. The updated version of Paint carries the build number 11.2609.401.0 and has been identified as the latest version in all ten countries reviewed by The Hacker News. Microsoft has classified the vulnerability as critical, as it can be exploited through an Out-of-Bounds Read, potentially leading to a complete system compromise.

The vulnerability affects all versions of Microsoft Paint running on Windows operating systems. Users are urged to download the update immediately to protect their systems. Microsoft has not released specific details on how many systems worldwide are affected by this vulnerability. The decision to provide the update solely through the Microsoft Store may be due to the need to expedite the distribution of the update without having to wait for the often longer Windows update cycles. This could also be a response to the increasing threats posed by cyberattacks that have risen in recent years.

Microsoft has previously employed similar approaches to deliver critical security updates more quickly. Utilizing the Microsoft Store for updates could also enhance user convenience, as users can more easily obtain the latest security features. The vulnerability was discovered by security experts who point out that such flaws in widely used software like Paint present an attractive target for attackers. The ability to execute code remotely poses a significant risk, especially in corporate environments where Paint is frequently used for various tasks. Microsoft has encouraged users to regularly update their software and follow security practices to protect against potential attacks.

The availability of the update through the Microsoft Store could help users access the latest security measures more quickly. The vulnerability CVE-2026-83844 is another example of the challenges software developers face in ensuring the security of their products. Given the increasing complexity of software and the constantly growing threats, it is crucial for companies to take proactive measures to protect their systems. Microsoft plans to roll out the update to all users by the end of November 2026.