Microsoft has released an updated version of Paint to address a critical security vulnerability, rated 8.1 out of 10, that could allow attackers to execute their own code on a user's computer. According to the company, the flaw can be exploited remotely over a network without requiring authentication or user interaction.

As highlighted by Coin Bureau, Microsoft first patched the Paint vulnerability in October before releasing another version on Friday to comprehensively address the issue. The company currently lists the flaw as not exploited so far.

Microsoft Releases Another Paint Security Update

The vulnerability carries a severity rating of 8.1 out of 10, placing it in the critical category. Its reported attack conditions are particularly notable because exploitation does not require an attacker to authenticate or to persuade a user into interacting with a malicious prompt.

That combination is significant in practice: flaws that can be triggered over a network with no credentials and no user action remove two of the most common barriers that limit attacks, which is why remotely exploitable issues in widely installed software are typically treated as urgent patching priorities. Because Paint ships with Windows, the affected application is present on machines across home, school, and workplace environments rather than limited to users who deliberately installed extra software.

Microsoft stated that the vulnerability could be exploited over a network. The company also specified that no authentication or user interaction is required, indicating that an attacker would not necessarily need direct access to the targeted computer or assistance from its user to exploit the flaw.

Microsoft initially addressed the issue with a patch in October. However, the company subsequently released a new Paint version on Friday, describing the update as an effort to "comprehensively address" the vulnerability.

Despite the severity rating, Microsoft lists the flaw as not exploited so far. This distinction is important: the vulnerability has been rated critical, but the company's listing does not indicate that attackers have exploited it in the wild. That status reflects Microsoft's listing at the time, so any change to it would be the key detail to watch as the patched version continues to roll out.

How to Check the Microsoft Paint Version

Microsoft Paint has been included with Windows since 1985, making it one of the operating system's longest-running applications. The security issue therefore concerns a familiar Windows tool that has been available to users for decades.

To stay protected, users are advised to update Paint through the Microsoft Store and to verify that the installed application is running version 11.2609.401.0. The recommended version number gives users a specific reference point when checking whether they have installed the update. Because Store apps such as Paint are updated separately from Windows' regular system updates, checking the app's own version is the dependable way to confirm the fix has arrived on a given machine.

Microsoft's latest release follows the earlier October patch and is intended to comprehensively address the reported security flaw.

Source: Hokanews. Written by Victoria Hale, Technology & Blockchain Writer.