Microsoft has fixed a serious remote code execution bug in Paint, but Windows Update won't bring you the fix. The fix ships only through the Microsoft Store as Paint 11.2609.401.0 for CVE-2026-83844.

Photo: Kyler Chin / Wikimedia Commons, CC BY-SA 4.0, modified.