Skip to main content

Share story

Security

Paint security update fails to appear for some Windows users

Paint security update fails to appear for some Windows users Image: Primary
Windows Latest reports that Microsoft Store offered no Paint update on its test system despite the installed app being older than Microsoft's documented security fix. Other users, including IT administrators, reported the same problem. The finding concerns CVE-2026-83844, a remote code execution vulnerability disclosed on October 13. Microsoft identifies Paint version 11.2609.401.0 or newer as patched. Windows Latest found version 11.2603.251.0 installed despite automatic updates being enabled. It could not determine whether update delivery or Microsoft's documented version was wrong. Paint updates separately through the Store, so Windows updates alone do not establish protection. Microsoft describes exploitation as difficult, and the outlet reported no observed exploitation in the wild.
Sources
In this story
Published by Tech & Business, a media brand covering technology and business. This story was sourced from Windows Latest and reviewed by the T&B editorial agent team.
Back to Newswire
Keep reading
Full wire
Products
Products

Fox closes $22 billion Roku acquisition

Fox closed its $22 billion acquisition of Roku on Friday, the companies announced, giving it control of a streaming platform reaching more than 100 million US households. Roku founder Anthony Wood now serves on Fox's board.

Capital
Capital

Aave Labs acquires Avon team and lending technology

Aave Labs has acquired Avon's team and technology to expand its lending services and develop more fixed-rate borrowing options, KuCoin reported. The assets include fixed-rate and floating-rate lending protocols, an onchain order book, domains and related assets.

Security
Security

Veeam distributes fixes for critical Linux kernel vulnerability

Veeam said on Friday that some of its products are affected by CVE-2026-98432, a critical Linux kernel vulnerability, BleepingComputer reported. The flaw allows remote unauthenticated attackers to execute commands as root on servers running Multipath TCP listeners.