The Hacker News
"Microsoft Paint RCE fix now available, but Windows update won't deliver it." Views expressed in this cybersecurity, cybercrime update are those of the reporters and correspondents. Accessed on 06 November 2026, 1318 UTC. Content and Source: "The Hacker News." https://thehackernews.com/ Please check URL or scroll down to read your selections. Thanks for joining us today. Russ Roberts (https://www.hawaiicybersecurityjournal.net). Microsoft Paint RCE Fix Now Available, but Windows Update Won't Deliver It Nov 06, 2026 Vulnerability / Windows Security A fix for CVE-2026-83844 , a remote code execution flaw in Windows Paint, is now in the Microsoft Store. Paint gets this fix only through a Store update, not through Windows updates. The fixed build, 11.2609.401.0, was the newest Paint build in all ten countries The Hacker News checked today. The flaw is an out-of-bounds read that could let an attacker run code over a network. Microsoft rates it as Important, ...