Microsoft Paint flaw lets hackers take control remotely

Microsoft has patched a high-severity vulnerability in Microsoft Paint, CVE-2026-83844, rated 8.1, that could allow unauthenticated attackers to execute code remotely over a network without user interaction or credentials, Cybernews reports. Microsoft rated the attack complexity high and exploitation less likely, and identified Paint build 11.2609.401.0 as the security update.