Windows Paint Had a Code Execution Hole and the Fix Microsoft Named Never Reached the Store

Tue, 10 Nov 2026 11:43:51 +0100

One crafted file opened in Paint could run an attacker’s code. In all 6 countries checked, the Store had no safe Paint. Auto-updates did not help. The fix Microsoft named on October 13 never got there.

On November 5, a Windows 11 PC with automatic app updates switched on in the Microsoft Store showed no update for Paint. Its owner assumed Paint was fine, and then looked up the version in the app’s settings.

Microsoft Paint on HackingPassion.com : root@HackingPassion.com-[~]

Windows Paint Had a Code Execution Hole and the Fix Microsoft Named Never Reached the Store