# SZB-0f0221e743: Microsoft Paint RCE flaw CVE-2026-83844 fixed via Store update, not Windows Update

A fix for CVE-2026-83844, an out-of-bounds read flaw that could let a network attacker run code in Windows Paint, is available only through a Microsoft Store update, according to The Hacker News.

- Type: Early warning
- Kind: Vulnerability
- Vendor: Microsoft
- Product: Windows Paint
- Status: Confirmed
- Sources: 6 distinct
- First seen: 2026-11-06 02:58 UTC
- Confirmed: 2026-11-06 12:52 UTC

Written by a model from the sources below. Verify against them.

## Summary

A fix for CVE-2026-83844, an out-of-bounds read flaw that could let a network attacker run code in Windows Paint, is available only through a Microsoft Store update, according to The Hacker News. The fixed build is 11.2609.401.0, which The Hacker News found to be the newest Paint build in all ten countries it checked.

## What to do

- Update Paint through the Microsoft Store to build 11.2609.401.0 or later.
- Do not rely on Windows Update to deliver this Paint fix.
- Check the installed Paint version in the Microsoft Store update list.

## Timeline

- 2026-11-06 02:56 UTC: Made public by Mastodon
- 2026-11-06 02:58 UTC: First seen by cve.now
- 2026-11-06 12:52 UTC: Confirmed as CVE-2026-83844
- 2026-11-07 00:02 UTC: Record last updated

## Evidence (6 sources)

- 2026-11-06 · Social · [Mastodon](https://infosec.exchange/@DailyCyberSecurity/117567244877966388): “Microsoft patched Windows Paint RCE vulnerability CVE-2026-83844 with an 8.1 CVSS score.”
- 2026-11-06 · Social · [r/cybersecurity](https://www.reddit.com/r/cybersecurity/comments/1xp2ml7/microsoft_paint_vulnerability_could_enable_remote/): “Microsoft Paint Vulnerability Could Enable Remote Code Execution Over a Network Without Authentication (CVE-2026-83844)”
- 2026-11-06 · Social · [r/sysadmin](https://www.reddit.com/r/sysadmin/comments/1xp2t48/cve202683844_windows_paint_remote_code_execution/): “CVE-2026-83844 - Windows Paint Remote Code Execution Vulnerability”
- 2026-11-06 · Press · [The Hacker News](https://thehackernews.com/2026/11/microsoft-paint-rce-fix-now-available.html): “A fix for CVE-2026-83844, a remote code execution flaw in Windows Paint, is now in the Microsoft Store.”
- 2026-11-06 · Social · [Mastodon](https://infosec.exchange/@cyberseckyle/117570031427899459): “Microsoft Paint CVE-2026-83844 (RCE) needs a Microsoft Store app update, not just Windows cumulative updates.”
- 2026-11-07 · Social · [Mastodon](https://mastodon.social/@EUVD_Bot/117572217568316864): “Authorization bypass through user-controlled key in Entra Device Registration allows an unauthorized attacker to elevate privileges over a network.”

## Corrections

None so far.

Something wrong on this page? Report an error: https://github.com/sazabi/cve.now/issues/new?title=Wrong%20fact%20on%20SZB-0f0221e743&body=https%3A%2F%2Fcve.now%2FSZB-0f0221e743%0A%0AWhat%20is%20wrong%2C%20and%20the%20source%20that%20shows%20it%3A%0A

## Questions about SZB-0f0221e743

### Has Microsoft confirmed it?

Mastodon, r/cybersecurity and r/sysadmin report a possible compromise. None of the sources says it happened.

Source: https://infosec.exchange/@DailyCyberSecurity/117567244877966388, https://www.reddit.com/r/cybersecurity/comments/1xp2ml7/microsoft_paint_vulnerability_could_enable_remote/, https://www.reddit.com/r/sysadmin/comments/1xp2t48/cve202683844_windows_paint_remote_code_execution/, https://thehackernews.com/2026/11/microsoft-paint-rce-fix-now-available.html, https://infosec.exchange/@cyberseckyle/117570031427899459, https://mastodon.social/@EUVD_Bot/117572217568316864

### What should Microsoft users do?

Update Paint through the Microsoft Store to build 11.2609.401.0 or later. Do not rely on Windows Update to deliver this Paint fix. Check the installed Paint version in the Microsoft Store update list.

### Does it have a CVE?

Yes. It is tracked as CVE-2026-83844.

Source: https://cve.now/CVE-2026-83844

## Tracked as

- [CVE-2026-83844](https://cve.now/CVE-2026-83844.md)

## Related

- Browse: [Early warnings](https://cve.now/early-warnings.md)

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/SZB-0f0221e743
Site guide for agents: https://cve.now/llms.txt