Microsoft Releases New Windows Paint Version to Address Critical RCE Vulnerability CVE-2026-83844
Microsoft has issued an updated version of Windows Paint to resolve a serious remote code execution vulnerability identified as CVE-2026-83844. The flaw allows an unauthenticated attacker to execute arbitrary code on vulnerable systems by sending a specially crafted packet, with no user interaction required. The vulnerability was first addressed in a security update on 13 October, but gained wider attention this week after system administrators on Reddit reported difficulties obtaining the patch. The National Cyber Security Centrum (NCSC) warned that successful exploitation could enable attackers to install programs, view data, or fully compromise affected systems. Microsoft now recommends that users upgrade to Windows Paint version 11.2609.401.0 or verify that the version has been installed automatically. The company updated its security bulletin for CVE-2026-83844 yesterday evening to confirm the new release fully mitigates the issue.
Security.NLNov 7, 2026Translated from NL