Paint security fix reaches Microsoft Store amid conflicting version records

A fix for Windows Paint's CVE-2026-83844 code execution vulnerability is available through the Microsoft Store rather than Windows Update. The Hacker News found the fixed build, 11.2609.401.0, was the newest offered in all ten countries it checked, after earlier checks found an unpatched build in six countries. Microsoft's advisory identifies 11.2609.401.0 as fixed, but its CVE record still marks only versions below 11.2605.91.0 as affected. Scanners using that record could therefore accept older builds. Paint installs separately for each user, and Windows can retain a copy for new accounts, so checking only the signed-in user can miss vulnerable installations.