Windows 11 Paint Vulnerability Poses Remote Hacking Risk
Translated & summarized from Cursorinfo by baba
A critical vulnerability in Windows 11's Microsoft Paint, CVE-2026-83844, allows remote code execution without user action. Microsoft rated the risk 8.1/10 and released a patch, but a delay in the Microsoft Store may have left some users vulnerable. Users are advised to check and update their Paint version to 11.2609.401.0 or newer to mitigate the risk.
The story in 5 lines · by baba
- Windows 11 Paint vulnerability CVE-2026-83844 allows remote code execution without user interaction.
- Microsoft rated the Paint vulnerability's severity at 8.1 out of 10.
- A patch was released October 13, 2026, but a delay in the Microsoft Store may have left some users unprotected.
- Users should update Paint to version 11.2609.401.0 or newer to fix the vulnerability.
- The vulnerability is particularly concerning for users actively utilizing Paint's integrated Copilot feature.
A critical vulnerability in Microsoft Paint for Windows 11, identified as CVE-2026-83844, allows attackers to remotely execute malicious code on a user's computer without any user interaction. Microsoft has rated the vulnerability's severity at 8.1 out of 10. While a patch was prepared on October 13, 2026, a technical issue reportedly delayed its availability in the Microsoft Store, potentially leaving some users unprotected.
The company stated that the issue is resolved in Paint version 11.2609.401.0 and later. However, user and system administrator reports suggest that the fix has not reached all devices. Consequently, users running older versions of Paint, particularly those with the integrated Copilot feature, may still be at theoretical risk.
Users can check their Paint version through Windows Settings under "Apps → Installed apps" or more quickly via PowerShell by running the command "Get-AppxPackage -Name Microsoft.Paint | Select-Object Name, Version" in an administrator-launched Terminal. If the installed version is older than 11.2609.401.0, users are advised to update it via the Microsoft Store.
PC World journalists noted that a potential error in the version number provided by Microsoft might be contributing to the confusion. Regardless, experts recommend users verify their Paint version is updated as a precautionary measure. This advice is particularly relevant for Israeli users who actively use Paint's Copilot feature, given the vulnerability's passive exploitation method. The 8.1 CVSS score indicates a high, though not critical, risk level.