The good news is that this is not a five-alarm fire, and checking takes about a minute. Here’s what happened, how worried to be (spoiler: mildly), and exactly how to make sure your copy is fixed.<\/p>\n\n\n\n Microsoft first published a security notice for the bug on October 13, 2026<\/strong>. It’s tracked under the name CVE-2026-83844<\/strong>, which is just the official ID number security folks use, like a case number at the DMV. Microsoft calls it a \u201cWindows Paint Remote Code Execution Vulnerability.\u201d<\/p>\n\n\n\n In plain English, the problem is something called an \u201cout-of-bounds read.\u201d Picture asking a waiter to bring you the first three items on a menu, and he walks off with the fourth, the fifth, and somebody’s car keys from the next table. Paint, when it opened a specially built image, could be tricked into reading parts of the computer’s memory it was never supposed to touch. According to Microsoft, a clever attacker could use that slip to run their own code on your PC.<\/p>\n\n\n\n That’s the scary part. Now for the part that should lower your blood pressure.<\/p>\n\n\n\n Honestly? Not very, as long as you update. Microsoft’s own notice says:<\/p>\n\n\n\n There was also some back-and-forth on how the attack would work. Early on, the notice described it as something that could happen over a network with no clicking required, and tech sites like Windows Latest called it a \u201cno-click\u201d bug. Then, on November 7<\/strong>, Microsoft updated the notice, lowered the severity score from 8.1 to 7.0 out of 10<\/strong>, and explained that the attack actually happens on your own computer and needs you to do something. Its example: an attacker uses a trick to convince you to download and open a specially crafted file from a website.<\/p>\n\n\n\n Translation: the most realistic danger is the classic one. Someone sends you a \u201cfunny picture,\u201d a fake invoice, or a \u201cphoto of your package\u201d and hopes you’ll open it. Which is exactly why the fix is worth having, because those tricks are older than Paint itself.<\/p>\n\n\n\n Most of us think of Windows updates as one big bucket. Patch Tuesday rolls around, your PC restarts at the worst possible moment, and you assume everything is now patched. But Paint isn’t part of that bucket anymore. It’s an app, like the ones you download from the Store, and it gets its updates from the Microsoft Store<\/strong>.<\/p>\n\n\n\n On November 6<\/strong>, Microsoft updated its notice to say that fully fixing the flaw requires a new version of Paint, 11.2609.401.0<\/strong>, and recommended \u201cinstalling this new version or ensuring that it was automatically updated.\u201d Security news site The Hacker News confirmed the same day that the fix is delivered only through a Store update, not through Windows Update.<\/p>\n\n\n\n And the rollout has been a little bumpy. Windows Latest reported on November 5 that its test PC had Store auto-updates turned on and was still running an older Paint (version 11.2603.251.0), with no update showing in the Store. The Hacker News reported that a device-management expert checking the Store in six countries earlier in the week found only an older build without the fix. By November 6, the fixed build was the newest one available in all ten countries The Hacker News checked.<\/p>\n\n\n\n So most PCs should get the fix on their own eventually. \u201cEventually\u201d just isn’t a great word to hear about a security patch.<\/p>\n\n\n\n No command lines, no tech degree. Just this:<\/p>\n\n\n\n Reading the number can be a little confusing, so here’s the trick: look at the second chunk<\/strong> of numbers. If it’s 2609 or higher, you’re good. If it’s something like 2603 or 2605, you’re behind.<\/p>\n\n\n\n If Paint doesn’t show up in your list, search the Store for \u201cPaint\u201d and open the listing from Microsoft Corporation, or use Microsoft’s own Store link for Paint<\/a>, which is the same link Microsoft attached to its security notice. If an update is waiting, you’ll see an Update button there.<\/p>\n\n\n\n Here’s a detail most people would never guess. Store apps like Paint are installed separately for each user account<\/strong> on a computer, according to The Hacker News. So if the family desktop has an account for you, one for your spouse, and one for the kids, updating Paint under your login doesn’t automatically fix the others.<\/p>\n\n\n\n If that’s your house, have each person sign in and do the quick check, or sign in to each account yourself and press Get updates. It’s the digital version of making sure everybody actually brushed their teeth.<\/p>\n\n\n\n This one isn’t really about Paint. It’s about a blind spot. Lots of the apps that come with Windows 11, the ones that feel like they’re part of Windows itself, now get their security fixes through the Microsoft Store on their own schedule. If you’ve turned off Store auto-updates, or you have a PC that only gets switched on at tax time, those fixes may never arrive on their own.<\/p>\n\n\n\n So add one small habit to your routine. Every month or so, when you think about Windows Update, also open the Microsoft Store, click Library, and press Get updates. It takes less time than finding the TV remote, and it covers a whole category of patches that Windows Update quietly skips.<\/p>\n\n\n\n And keep your guard up around surprise files. Even with this bug fixed, the oldest trick in the book still works best: getting you to open something you weren’t expecting. If an image, invoice, or \u201cshipping photo\u201d shows up out of nowhere, don’t open it until you’ve confirmed who sent it and why.<\/p>\n\n\n\n Stuck on a step, or seeing a version number that doesn’t make sense? Send me a note through the Contact Us page<\/a>.<\/p>\n\n\n\n Rather watch than read? Catch my quick daily tech shorts on YouTube<\/a>.<\/p>\n\n\n\n A Microsoft Paint flaw could let a booby-trapped image run code on your PC. The fix comes from the Microsoft Store, not Windows Update. How to check.<\/p>\n","protected":false},"author":1,"featured_media":719,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[73],"tags":[255,123,170,257,110,252,253,191,172,256,254,150],"class_list":["post-721","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-tech","tag-app-updates","tag-cybersecurity","tag-hack","tag-malware","tag-microsoft","tag-microsoft-paint","tag-microsoft-store","tag-online-safety","tag-online-security","tag-pc-tips","tag-security-update","tag-windows-11"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t![\"Woman](\"https:\/\/pagesofwisdom.com\/wp-content\/uploads\/2026\/11\/windows-paint-security-update-laptop.jpg\")
What’s actually wrong with Paint?<\/h2>\n\n\n\n
How worried should you be?<\/h2>\n\n\n\n
\n
The weird part: Windows Update won’t fix it<\/h2>\n\n\n\n
![\"Silver](\"https:\/\/pagesofwisdom.com\/wp-content\/uploads\/2026\/11\/windows-11-laptop-booting.jpg\")
How to check your Paint version in one minute<\/h2>\n\n\n\n
\n
How to update Paint if you’re behind<\/h2>\n\n\n\n
\n
One more catch if you share a PC<\/h2>\n\n\n\n
Why it matters to you<\/h2>\n\n\n\n
Quick checklist<\/h2>\n\n\n\n
\n
Sources<\/h2>\n\n\n\n
\n