Overview
- Security researchers and Microsoft identified CVE-2026-83844 as a high‑severity Paint vulnerability that can allow unauthenticated remote code execution.
- Microsoft issued a patch that protects Paint at version 11.2609.401.0 and assigned the flaw a CVSS score of 8.1.
- Reports from security outlets and system administrators on Thursday, Nov. 5 showed the Store-delivered update is not appearing or is not being applied on many Windows 11 systems.
- Microsoft says exploitation is complex and requires deep system knowledge and the company has no evidence of active attacks so far.
- Practical steps for users are to check the Paint version with PowerShell, reinstall or update Paint from the Microsoft Store if available, or uninstall the app temporarily if it is not needed.