Security AlertHigh
Microsoft Store fix available for Windows Paint RCE flaw
Nov 6, 2026 · Summarized by Fundy Tech from The Hacker News
The 30-second version
Microsoft has fixed a Windows Paint remote code execution flaw through the Microsoft Store. The patch will not arrive through Windows Update.
Key points
- Flaw is CVE-2026-83844 in Windows Paint.
- Fix is in Store build 11.2609.401.0.
- Attack could work over a network with no sign-in.
Why it matters
If your PCs use Paint, the fix may not reach everyone at the same time. Businesses that manage many devices should check Store versions, not just Windows updates. A missed update could leave a network-facing issue open longer than expected. Household users should also confirm the Store app updated on each PC account.
Who’s affected: Windows Paint users
What to do
- Check the Paint version in the Microsoft Store.
- Update to build 11.2609.401.0 or later.
- Review all user accounts on shared PCs.
- Do not rely on Windows Update alone.
Vulnerability IDs
Original reporting
Not sure if this affects you?
Fundy Tech helps businesses and households across Atlantic Canada stay patched, protected and up to speed. Tell us what you’re running and we’ll tell you straight whether you need to act.