Microsoft releases fix for high severity Paint code execution vulnerability

Microsoft has patched a high-severity flaw in Windows Paint that could allow unauthorized remote code execution, though no active exploitation has been detected.

FTMQ Security, written by our newsroom9 November 2026 at 00:010 views

Microsoft addressed a high-severity security vulnerability in its Windows Paint application, Tech-Insider.org and Shattered.io reported. The bug is tracked as CVE-2026-83844 and carries a CVSS severity score of 8.1 out of 10. Microsoft released a fix for the vulnerability on October 13, 2026. [1][2]

The flaw is described by Microsoft as an out-of-bounds read error within Windows Paint. According to Tech-Insider.org, the issue allows an unauthorized attacker to execute arbitrary code remotely over a network without requiring any prior privileges. [1]

Tech-Insider.org reported that no active exploitation of CVE-2026-83844 has been observed or confirmed in the wild. System administrators and users are advised to update to a patched version of the software to mitigate potential exposure. [1]

CVE-2026-83844 affects Windows Paint and carries a CVSS severity score of 8.1.
The out-of-bounds read flaw allows unauthorized remote code execution over a network with no privileges required.
Microsoft released a patch for the flaw on October 13, 2026.
No active exploitation of the vulnerability has been confirmed.

Sources

Every paragraph above points to the numbered items it rests on. Read the originals here.

[1]Paint CVE-2026-83844: 8.1 Severity, Update Now [2026]https://tech-insider.org/, 2d ago (the report this story comes from)
[2]Windows Paint CVE-2026-83844 (CVSS 8.1): Patch Now [2026]shattered.io, 2d ago

Background

[3]Severity of illness on Wikipedia

Our newsroom writes these reports with the help of software, from the 3 sources listed and nothing else, and checks them against those sources. Facts can still be wrong or move on; the originals are the record. Spotted a mistake? Write to daniel@monsterkong.com.

Get the day in one email

Reports like this one, the top news of the last 24 hours, every morning. Free, one email a day; readers can comment under every report.

By signing up you agree to our terms and privacy policy. Unsubscribe any time.

Comments

Join the conversation

Comments are open to readers of our daily email: the top news of the last 24 hours, every morning, free. Sign up and the comment box opens.

Already on the list? Enter the same address and we will send a sign-in link.