Paint has a no-click security flaw. Your PC might’ve missed the patch

Summary

Dangerous security vulnerabilities can occur in virtually any Windows app. Now it’s Microsoft Paint’s turn. The well-known Windows drawing app contains a vulnerability that attackers can exploit to inject malicious code. The user doesn’t even need to click on anything for it to happen. Microsoft rated the threat posed by the CVE-2026-83844 vulnerability at 8.1 out of 10 and released a fix on October 13th, which was the last major Patch Tuesday . The problem? That patch apparently never reached some users, meaning the Paint app remains unpatched and vulnerable. This was reported by Windows…

Description from Pcworld.