According to BlockBeats, Binance founder CZ on November 7 warned of a critical Windows Paint vulnerability and urged users to immediately update their operating systems, stating that applications cannot protect against OS-level flaws.
Microsoft disclosed vulnerability CVE-2026-83844 affecting Microsoft Paint versions below 11.2605.91.0, with a CVSS score of 8.1. The flaw stems from an out-of-bounds read issue that could allow unauthenticated attackers to execute arbitrary code remotely without user interaction. Microsoft has released a security patch, with no confirmed active exploitation reported to date.