Microsoft Paint RCE Fix Now Available, but Windows Update Won't Deliver It

A fix for CVE-2026-83844, a remote code execution flaw in Windows Paint, is now in the Microsoft Store. Paint gets this fix only through a Store update, not through Windows updates. The fixed build, 11.2609.401.0, was the newest Paint build in all ten countries The Hacker News checked today. The flaw is an out-of-bounds read that could let an attacker run code over a network. Microsoft rates

Vulnerabilities & Zero-Day Operating Systems
Read the full article at The Hacker News Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →
CyberInsider

Mullvad Browser 16.0 switches DNS to Quad9, adds window title privacy

Mullvad Browser 16.0 introduces a privacy setting that keeps other apps from reading webpage titles through the browser’s window name. The release also switches encrypted DNS to Quad9, reorganizes the settings menu, and adds native support for 64-bit ARM Linux systems. Mullvad detailed the changes on November 6, following the October 29 release of version … The post Mullvad Browser 16.0 switches DNS to Quad9, adds wi…

Cisco Security Advisories

Vulnerabilities in PHP Affecting Cisco Products: October 2026

On October 21, the PHP Foundation announced the availability of a Critical PHP Security release addressing two critical vulnerabilities: CVE-2026-109618 - RCE via OOM corruption CVE-2026-109619 - RCE via stale global state For information about these vulnerabilities, see the advisories GHSA-w8hw-w9fx-j79w and GHSA-6wmf-4rv5-p3rp. These vulnerabilities are being referenced as PHP2shell. For information about Splunk pr…