Microsoft Paint RCE Fix Lands in Store, Not Windows Update

Microsoft’s fixed Paint build for CVE-2026-83844, a remote code execution flaw, reached the Microsoft Store by 6th November, 2026 but Windows Update won’t install it. Admins also face a second problem: Microsoft’s own records disagree on which Paint build counts as fixed.

At a Glance

• Microsoft rates CVE-2026-83844 as Important, with a CVSS score of 8.1, and lists no workaround or mitigation.
• Paint build 11.2609.401.0 carries the fix, and it arrives only through Microsoft Store updates.
• The public CVE record and the NVD entry still mark only builds below 11.2605.91.0 as affected.
• Brian Vitko of RFF found an unfixed Paint build at the top of the Store in six countries earlier this week.

Paint’s fix arrived through Store auto-update

Brian Vitko, of device-management software maker RFF, queried the Store catalog for the US, UK, Germany, Australia, India and Singapore earlier this week. Every market returned 11.2605.81.0, a build without the fix. A Store…