# MS has messily patched a Microsoft Paint security vulnerability, but the update still isn’t showing up for some

- URL: https://talkfuse.com/story/ms-has-messily-patched-a-microsoft-paint-security-vulnerability-but-the-update-still-isnt-showing-up-for-some/
- Published: 2026-11-10T17:14:03+00:00
- Updated: 2026-11-10T17:42:23+00:00
- Original publisher: PC Gamer
- Original article: https://www.pcgamer.com/software/windows/ms-has-messily-patched-a-microsoft-paint-security-vulnerability-but-the-update-still-isnt-showing-up-for-some/
- Topics: Software, Technology

## Key points

- Paint’s security update may not have reached every user.
- Check for version 11.2609.401.0 in the Microsoft Store.
- Microsoft lowered the vulnerability rating from 8.1 to 7.0.

## Summary

Microsoft disclosed and patched a security flaw in Paint on 13 October, but some users may not have received the update. The rollout and reports about the vulnerability have been inconsistent, so Microsoft’s guidance is to check the installed version and update if needed.

The recommended version is 11.2609.401.0, available through the Microsoft Store; users can check it under Settings in Paint, and those on managed work computers may need their administrator’s help. The flaw was first rated 8.1 on the CVSS scale, then downgraded to 7.0 on 9 November, with Microsoft describing it as a local exploit requiring someone to open a crafted file rather than a network attack.

---
Summarised by TalkFuse (https://talkfuse.com/). Quote the original publisher for the reporting and link this page for the summary and discussion.