X

Windows 11 Paint Has a Remote Hacking Bug - How to Check Your Version and Get the Fix

Be the first to comment

Microsoft has fixed a serious security bug in the Windows 11 Paint app, but the fix comes from the Microsoft Store, not Windows Update - so check your Paint version today.

Dark illustration of a closed paint tin whose tamper-evident seal strip around the lid has split, with a thin red glow leaking from the seam, above the title Is Your Paint Patched

It takes one minute, and there's no need to panic - Microsoft rates the bug hard to exploit, and no attacks have been reported.

Below is what the bug is, how to see your version, and how to get the update.

What the Paint Bug Is

The flaw is tracked as CVE-2026-83844, and Microsoft calls it a "Windows Paint Remote Code Execution Vulnerability".

In plain English, a bug in how Paint reads data could let an attacker run their own code on your PC.

It scores 8.1 out of 10 on the standard severity scale. The official record says the attacker needs no password and no click from you, but the attack is complex to pull off.

Microsoft released the fix on October 13 through the Store, but many PCs still don't have it.

Why Windows Update isn't enough:

Paint, Notepad and Snipping Tool are Store apps. A fully updated Windows can still run an old, unpatched copy of Paint if its Store update never arrived.

Check Your Paint Version

  1. Open Paint. Click the gear icon at the top right, then look for the version number under About Paint.
  2. Or ask PowerShell. Open Windows PowerShell and run Get-AppxPackage -Name Microsoft.Paint | Select-Object Name, Version.
  3. Compare the number. Microsoft's support page names version 11.2609.401.0 or newer as protected.

There's a small twist. The official CVE record lists versions below 11.2605.91.0 as affected, a lower number than the support page gives, so if you're between the two you're probably fine but not certainly.

How to Get the Fix

  1. Open the Microsoft Store. Click Library (called Downloads on some Store versions) at the bottom left.
  2. Click Get updates. Let the Store check and install everything it finds, including Paint.
  3. Check the version again. Close Paint first, then repeat the check above.

No update showing?

You're not alone - Windows Latest and several IT admins found the Store offering no newer Paint. Install whatever update you are offered, check again in a few days, and never download Paint from a third-party site.

Need to Edit Images in the Meantime?

If you'd rather not open Paint until it's patched, a free editor does the same jobs and more. paint.net is the closest match, with layers and effects but the same simple feel.

For quick crops, resizing and format changes, IrfanView opens almost any image in a blink.

If you want Photoshop-style tools, try PhotoCraft or GIMP.

Quick questions

Is the Windows 11 Paint bug being used in attacks?

No attacks have been reported so far, and Microsoft rates the flaw hard to exploit. It's still worth updating now.

Does Windows Update fix the Paint bug?

No. Paint is updated through the Microsoft Store, so check Get updates in the Store as well as Windows Update.

Which Paint version is safe?

Microsoft's support page names 11.2609.401.0 or newer. The CVE record lists versions below 11.2605.91.0 as affected.

Do I have to open a file for the bug to work?

The official rating says no user action is needed, but Microsoft also says the attack is complex. Updating removes the risk either way.

Should I uninstall Paint?

You can, from Settings > Apps > Installed apps, and reinstall it later from the Store. Most people only need to update it.

The bottom line

Check your Paint version, run Get updates in the Microsoft Store, and check again in a few days if nothing newer turns up. A free editor covers you until then.

Reader comments (0)

Write a comment

Be the first to comment on Windows 11 Paint Has a Remote Hacking Bug - How to Check Your Version and Get the Fix

0 / 3000
Verification code picture

Letters and numbers, not case sensitive. Hard to read? Get a new code.

Reviews and comments get a quick check before they go live - no spam allowed.

Link copied to clipboard!