Is CVE-2026-83844 known to be exploited?

It is not marked known-exploited in this record.

CVE-2026-83844

Apply the Microsoft Store update for Windows Paint to version 11.2609.401.0. Users relying on Windows Update should verify Paint build version and manually install the Store update if necessary. Monitor Microsoft Store for Paint updates in environments with automated Windows Update policies.

Quick answers

What is CVE-2026-83844?: Apply the Microsoft Store update for Windows Paint to version 11.2609.401.0. Users relying on Windows Update should verify Paint build version and manually install the Store update if necessary. Monitor Microsoft Store for Paint updates in environments with automated Windows Update policies.
How severe is CVE-2026-83844?: high, CVSS 7.5
Is CVE-2026-83844 known to be exploited?: It is not marked known-exploited in this record.
How should CVE-2026-83844 be mitigated?: Apply the Microsoft Store update for Windows Paint to version 11.2609.401.0. Users relying on Windows Update should verify Paint build version and manually install the Store update if necessary. Monitor Microsoft Store for Paint updates in environments with automated Windows Update policies.

CVSS

7.5

Vendor

Microsoft

Published

Nov 7, 2026 · 01:20

Patch

Unknown / not confirmed

Affected products

Windows Paint

Mitigation

Microsoft Paint RCE Fix Available via Microsoft Store, Not Windows Update

A remote code execution vulnerability in Windows Paint, tracked as CVE-2026-83844, has been addressed in a Microsoft Store update. However, the fix is not being delivered through Windows Update, creating a deployment gap for users who rely on automatic update channels. The flaw is an out-of-bounds read that could allow an attacker to execute code over a network.

—1m

CVE-2026-83844

Quick answers

Related News

Microsoft Paint RCE Fix Available via Microsoft Store, Not Windows Update