Microsoft Paint could allow the execution of malicious code / Microsoft has released an update for Windows 11

Microsoft Paint, the application included in Windows 11, is affected by a security vulnerability that could allow malicious code to be executed without the user opening a suspicious file or taking any direct action. The issue, identified as CVE-2026-83844, was reported by researchers and covered by Golem.de.

The vulnerability is considered a “zero-click” flaw and can be exploited through specially crafted data transmitted over a network. However, the attack requires advanced technical knowledge and several conditions to be met, which is why Microsoft estimates that exploitation is unlikely. The risk is rated at 8.1 out of 10, and so far there is no public evidence that the issue has been used in real-world attacks.

The affected product is the version of Microsoft Paint distributed through the Microsoft Store for Windows 11. Microsoft identifies version 11.2609.401.0 as the update that fixes the vulnerability. Users should open the Microsoft Store, check the updates section, and install the latest available version.

The patch is being rolled out gradually, so the update may not appear immediately on all devices. Until it is installed, users are advised to check the Microsoft Store regularly and keep Windows 11 up to date. Unofficial versions or fixes from unknown websites should not be downloaded.