The Paint Security Fix You Won't Find in Windows Update

Robert Moore · 2026-11-06

So you think Windows Update keeps your PC safe? Well, here's a curveball: a critical security fix for Microsoft Paint is out, but Windows Update won't deliver it. Instead, you'll need to grab it from the Microsoft Store. Yeah, I know—it's a bit weird. Let me explain. The flaw, tracked as CVE-2026-83844, is a remote code execution (RCE) vulnerability in Windows Paint. In plain English, that means an attacker could run malicious code on your machine over a network. Sounds serious, right? Microsoft rates it as important, and the fix is already available in the Store. But if you're like most people, you probably don't think about updating Paint separately. And that's the problem. ### Why Windows Update Won't Help Windows Update is great for patching the operating system and many built-in components, but some apps—especially those that ship as Store apps—get updates through a different channel. Paint is one of them. So even if you're diligent about installing Windows updates, you might still be vulnerable if you haven't updated Paint from the Store. The fixed build is 11.2609.401.0, and according to checks across ten countries, it's the newest version available. So if you're running an older build, you're at risk. ### What Exactly Is the Risk? The vulnerability is an out-of-bounds read, which can lead to code execution. In simpler terms, it's like a memory leak that an attacker can exploit to run their own commands. The attacker would need to convince you to open a specially crafted file or visit a malicious website, but once they do, they could take control of your system. That's why it's crucial to patch it ASAP. ### How to Protect Yourself First, check your Paint version. Open the Microsoft Store, go to your library, and update Paint if needed. You can also manually check for updates in the Store app. It's a quick step that could save you a lot of trouble. But wait—why is this fix only in the Store? Microsoft has been moving more components to the Store model for faster updates, but it does put the onus on users to keep those apps updated. It's a trade-off between speed and convenience. > "Security is a shared responsibility, and sometimes that means checking more than just Windows Update." So next time you fire up Paint to doodle or edit a screenshot, make sure you're on the latest version. It's a small habit that goes a long way. ### The Bigger Picture This incident highlights a growing trend: as more apps become Store-based, we need to adjust our update habits. Don't assume Windows Update covers everything. Stay informed, and check your app versions regularly. After all, staying secure in today's digital world requires a bit of vigilance. And hey, if you're into antidetect browsers or digital privacy, you already know the drill: always keep your software up to date. Whether it's your browser or your Paint app, updates matter. So go ahead, open that Store, and hit update. Your future self will thank you.