Microsoft Paint receives security update via the Store

A new security update for Microsoft Paint is now available to address a critical security vulnerability. The vulnerability, known as CVE-2026-83844, allows attackers to execute code over a network. Microsoft has rated the severity of this vulnerability as high, meaning users are strongly urged to install the update.

However, the update is not available through regular Windows updates. Instead, users must use the Microsoft Store app to download the latest version of Paint. The updated version carries the build number 11.2609.401.0 and is available in all ten countries reviewed by The Hacker News.

Details of the Vulnerability

The vulnerability in Microsoft Paint involves an Out-of-Bounds Read that could allow an attacker to execute malicious code when a user opens a specially crafted file. This type of vulnerability is particularly dangerous as it enables attackers to take control of the victim's system without the user noticing any suspicious activity.

Microsoft has emphasized that addressing this vulnerability is of utmost importance to ensure user safety. The fact that the update is only provided through the Microsoft Store may pose challenges for some users, especially those who do not regularly use the Store or have difficulty accessing it.

Availability and Installation of the Update

To install the update, users need to open the Microsoft Store app on their Windows device and search for the latest version of Paint. After installing the updated version, users should ensure that they regularly check for any other security updates for their operating system and other applications as well.

Providing security updates through the Microsoft Store is a step that Microsoft may consider more frequently in the future to minimize the spread of vulnerabilities. The decision not to offer the update through Windows Update may indicate that Microsoft is pursuing a differentiated strategy for managing software updates.

Users of Microsoft Paint should be aware that installing the update is crucial to protect their systems from potential attacks. The vulnerability could affect not only individual users but also businesses that use Microsoft Paint in their workflows.

Microsoft has previously provided similar security updates for other applications to ensure the integrity of their software. The current situation underscores the need to regularly update software and follow security policies to minimize the risk of cyberattacks.