Microsoft Paint RCE Fix Now Available, but Windows Update Won't Deliver It
Fixed build 11.2609.401.0 is now in the Microsoft Store but Windows Update does not deliver it.
55
Fixed build 11.2609.401.0 is now in the Microsoft Store but Windows Update does not deliver it.
A new CVE in Microsoft Paint has been disclosed, raising questions about store update processes.
An out-of-bounds read in Windows Paint build 11.2609.401.0 lets unauthenticated attackers execute code remotely without interaction.
Microsoft warns of out-of-bounds read in Paint (CWE-125) enabling unauthenticated remote code execution; users must update to build 11.2609.401.0 or later.
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views