A security fix is available for CVE-2026-83844, an Important-rated remote code execution flaw in Windows Paint.
Developers and administrators should note that the updated build 11.2609.401.0 is delivered exclusively via the Microsoft Store rather than standard Windows updates.
The important detail is that the update does not come through the classic Windows update mechanism. Instead, it is available exclusively through the Microsoft app store.
The new version and installation
Microsoft has rated the issue as important and has set the fix to version 11.2609.401.0. At the time of the update, the issue was not known to be used in real-world attacks, and the company noted that success requires deep knowledge of the target system, without requiring login or user assistance.
Since the app is installed separately for each user account on a computer, along with copies intended for future users, there could be multiple installations on the same machine. According to researchers, the test computers eventually received the new version via the app store's automatic update.
>Stay connected with Hacks.gr
Set us as a preferred source on Google and find us on social media.
Preferred source
↗
end of article
Top comments (0)