Windows Paint RCE fix available via Microsoft Store

Microsoft released a fix for CVE-2026-83844, a remote code execution flaw in Windows Paint, through the Microsoft Store only—not via Windows Update. The vulnerability is an out-of-bounds read enabling network-based code execution. Users must manually update Paint from the Store to receive protection. The fixed build is 11.2609.401.0.