Windows Paint security fix comes from the Microsoft Store, not Windows Update
Microsoft fixed a flaw in Windows Paint that could let an attacker run code over a network, but the fix only arrives through a Microsoft Store update of Paint, version 11.2609.401.0, not through Windows Update.
What it means for you
If your Store updates are off, your Paint may still have the hole even after installing Windows updates.
What to do
Open the Microsoft Store, go to Library and update Paint; check its version under Settings in Paint (11.2609.401.0 or later).
The details
Microsoft rates the flaw Important. It wasn't known to be exploited when it was published on 13 October. Paint is installed per user account, so other accounts on the same PC can still have an older copy.
How-tos from our channels
Search all how-tos ›
How to Download Malwarebytes for Windows 11 — One Setting to Change Before You Install (2026)
Malwarebytes · How To Rocket
Private Internet Access VPN Firestick
Private Internet Access · Guide Glimpse
How to Use Malwarebytes Free Version in 2026 — 5 Things the Free Version Still Does Well
Malwarebytes · How To Rocket
Deals we checked
All 10 ›
ExpressVPN−80%80% off 2 years + 4 extra monthsChecked on ExpressVPN's site, 8 Nov
NordVPN−78%78% off + 3 extra monthsChecked on NordVPN's site, 8 Nov
Hostinger$1.99/moBlack Friday: up to 85% off web hostingChecked on Hostinger's site, 8 Nov
FastestVPN$40Black Friday: lifetime plan for $40 (93% off)Checked on FastestVPN's site, 8 Nov
More app news
All app news ›- Safety
Black Friday scam: 10,000 fake shopping sites, some showing up in AI answers
If ChatGPT, Perplexity or Google points you to a cheap brand store, it may be a fake one.
- Safety
iPhone Duo scam: fake online stores offer the foldable iPhone at a discount
If you see a cheap iPhone Duo with a ticking timer, it's very likely a scam.
- New app
Tots Weather tells you what to dress your child in today
If mornings are a fight about coats, it settles the snowsuit question.
We write every story in our own words from its source and check the facts before it goes up. Source: The Hacker News.