Microsoft Windows Paint: Remote code execution (CVE-2026-83844)

A vulnerability (CVE-2026-83844) exists in Microsoft Windows Paint, rated with a risk score of 8.1. An attacker can exploit this flaw by enticing a user to open a specially crafted image file within the application. Successful exploitation permits the execution of arbitrary commands, enabling unauthorized access, data manipulation, or the installation of malicious software. No active exploitation has been reported as of the date of the advisory.

Impact

Successful exploitation allows an attacker to gain control over the affected system, enabling the viewing, modification, or deletion of data and the execution of arbitrary programs.

Recommendation

• Update Microsoft Windows Paint to version 11.2609.401.0 or later via the Microsoft Store or standard Windows update channels.
• If the application version is unknown, conduct an inventory of installed software versions to identify systems requiring updates.