Microsoft · Windows Paint · Remote Code Execution · Microsoft Store
CVE-2026-83844: Windows Paint RCE With Conflicting Fixed-Version Reports
A Windows Paint out-of-bounds read can lead to code execution over a network. It scores 8.1 and is not known to be exploited, but the reported fixed build differs by source. Here is who is affected and how to update.