Microsoft has fixed a critical RCE flaw in Paint, but you won't get the patch via Windows Update. Here's how to secure your system through the Microsoft Store.
So, Microsoft finally dropped a fix for a nasty security hole in Paint. But here's the kicker: you won't get it through Windows Update. Yeah, you heard that right. The patch is only available through the Microsoft Store, which means if you're not paying attention, you might miss it entirely.
The vulnerability, tracked as CVE-2026-83844, is a remote code execution (RCE) flaw. In plain English, that means an attacker could run malicious code on your machine over a network. Not exactly the kind of thing you want lingering on your system.
### Why the Store-Only Fix Matters
Microsoft rates this as important, and for good reason. The flaw is an out-of-bounds read, which is a fancy way of saying the software can be tricked into reading memory it shouldn't. That can lead to crashes, data leaks, or even let an attacker execute arbitrary code. The fix, build 11.2609.401.0, is now the latest version of Paint in the Store. But if you're like most people, you probably don't think about updating Paint. It's just there, drawing stick figures and cropping screenshots.
That's the problem. Windows Update won't lift a finger for this one. Paint updates come through the Store, and if you've disabled automatic app updates or just never open the Store, you're leaving the door open.
> "Security isn't about convenience. It's about doing the small things that keep you safe, even when no one's watching."
### What You Should Do Right Now
- Open the Microsoft Store app.
- Go to Library and click "Get updates."
- Make sure Paint updates to version 11.2609.401.0 or later.
- While you're at it, check if automatic app updates are turned on.
It's a quick fix, but it's easy to overlook. And that's exactly what attackers count on.
### The Bigger Picture
This isn't the first time Microsoft has pushed a critical fix through the Store instead of Windows Update. As the company continues to decouple core apps from the OS, we're likely to see more of these split update paths. It's convenient for Microsoft, but it puts the burden on us to stay vigilant.
So, do yourself a favor: take two minutes, update Paint, and maybe set a reminder to check the Store for updates once a month. Your future self will thank you.
Stay safe out there.
