Microsoft Paint RCE Vulnerability Fixed via Microsoft Store Update

Published: 6 Nov 2026 · Worldwide

A remote code execution flaw (CVE-[phone number]) in Windows Paint has been fixed in the latest Paint build [phone number]. The fix is only available through the Microsoft Store, not via Windows Update, so users must update Paint separately to stay protected.

Who is at risk

Windows users who use Microsoft Paint

How to protect yourself

• Update Microsoft Paint via the Microsoft Store promptly
• Do not rely solely on Windows Update for Paint security patches
• Avoid opening untrusted files in Microsoft Paint until updated

Source: The Hacker News (thehackernews.com)

Language: English Ελληνικά Español Français Deutsch Italiano Português Nederlands Polski Türkçe Русский العربية हिन्दी 中文 日本語

🔔 Scam alerts

Check a suspicious message now →

All latest scams →