Microsoft has patched a critical remote code execution flaw in Paint, but the fix is only available through the Microsoft Store—not Windows Update. Here's how to make sure you're protected.
So, Microsoft finally dropped a fix for a nasty security hole in Paint. The flaw, tracked as CVE-2026-83844, is a remote code execution bug—meaning an attacker could potentially run malicious code on your machine over a network. Sounds serious, right? It is. But here's the twist: you won't find this patch through Windows Update. Nope, it's only available via the Microsoft Store.
That's right. While your system might be diligently downloading its monthly security rollups, this particular fix is slipping through the cracks unless you manually update Paint from the Store. The patched version is 11.2609.401.0, and as of today, it's the latest build available in all ten countries we checked. So if you're still running an older version, you're leaving the door open.
### Why This Matters for Your Security
Remote code execution vulnerabilities are among the most dangerous because they allow attackers to take control of your system without physical access. In the case of Paint, the bug is an out-of-bounds read, which can lead to memory corruption and, ultimately, code execution. Microsoft rates this as important, but don't let the rating fool you—any RCE is a big deal.
And because the fix is distributed through the Store, it's easy to miss. Many users disable automatic Store updates or simply never open the Store app. That means thousands of PCs could remain vulnerable even after Patch Tuesday comes and goes.
### How to Protect Yourself
First, check your Paint version. Open Paint, click the gear icon (or go to Settings), and look at the version number. If it's anything lower than 11.2609.401.0, you need to update. Here's how:
- Open the Microsoft Store app.
- Go to the Library section.
- Click "Get updates" and wait for the list to populate.
- Find Paint in the list and update it manually if needed.
Alternatively, you can search for "Paint" in the Store and hit the update button if it appears.
But wait—there's a bigger lesson here. This isn't the first time Microsoft has pushed critical fixes through the Store instead of Windows Update. As the company continues to decouple core apps from the OS, we're likely to see more of these Store-only patches. That means you can't just rely on Windows Update anymore; you need to keep an eye on your Store apps too.
### The Takeaway
Security is a moving target, and sometimes the most important updates hide in plain sight. Don't assume that because Windows Update says you're up to date, you're actually safe. Take two minutes today to update Paint—and while you're at it, check for updates on other built-in apps like Calculator, Photos, and Notepad. It's a small habit that could save you from a big headache.
Remember, attackers don't wait. They scan for unpatched systems constantly. The fix is out there; it's up to you to grab it.
