21CTO

Nov 10, 2026 · Information Security

Windows Paint RCE Vulnerability CVE-2026-83844: Analysis and Fix

Microsoft disclosed a remote code execution flaw (CVE-2026-83844, CVSS 7.0) in Windows Paint that lets attackers run arbitrary code by tricking users into opening malicious files; the fix was delayed and initially misidentified, with corrected version 11.2609.401.0 now available via Microsoft Store.