Article URL: https://www.cve.org/CVERecord?id=CVE-2026-83844 Comments URL: https://news.ycombinator.com/item?id=50384233 Points: 334 # Comments: 117. Microsoft has disclosed a Windows Paint vulnerability that could let an attacker run code remotely without signing in or requiring a user to click anything. Microsoft Paint has a serious RCE flaw (CVE-2026-83844), but Windows 11 users report they can't find the patched version in Microsoft Store.