[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-microsoft-paint-needs-version-1126094010-to-close-a-flaw":10,"sections":41},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":30,"tags":31,"sources":36,"feedback":40,"feedback_at":22,"cost_usd":40,"total_tokens":40},12750,"microsoft-paint-needs-version-1126094010-to-close-a-flaw","Microsoft Paint Needs Version 11.2609.401.0 to Close a Flaw","Microsoft patched a Paint vulnerability on October 13, then revised its severity score and attack description, and the fix is not reaching everyone cleanly.","Microsoft Paint needs to be on version 11.2609.401.0 to carry the fix for a security vulnerability the company disclosed and patched on October 13, and not every machine appears to have it.\n\nTo check, open Paint, go to Settings and look under \"About Paint\". You can also run `Get-AppxPackage -Name Microsoft.Paint | Select-Object Name, Version` in PowerShell. If the number is lower, update through the Microsoft Store. If your Windows 11 settings block user updates, ask your sysadmin.\n\nDelivery is the catch. Paint updates through the Store, and some users, especially on work machines, have automatic Store updates turned off. Even with auto-updates on, accounts conflict. One outlet reported that the Store served older versions to some users until recently, and another said it didn't seem to receive the new build despite auto-updates being enabled. It is not clear whether that is a rollout fault or a mixup in release numbers.\n\nThe bug's description has also shifted. It first received an 8.1 on the CVSS scale, a 0-to-10 severity rating. According to a security tracker, Microsoft cut that to 7.0 on November 9 and reworded the flaw as a local exploit, meaning a user must open a crafted file, rather than a network attack. Early coverage had called it a no-click flaw, while other outlets said a specially crafted image could trigger it.\n\nBoth scores fall in the \"high\" band of CVSS, so the downgrade changes the story about how an attacker reaches you more than how urgently you should patch. A bug that needs you to open a file is the familiar phishing-attachment problem, not a worm. But a fix that depends on a Store update is only as good as that update's reach, and with the rollout reports unresolved, the version number in \"About Paint\" is the only reliable answer.","[\"microsoft\",\"windows-11\",\"vulnerability\",\"microsoft-paint\"]","2026-11-10T17:14:03.000Z","2026-11-10T17:51:03.642Z","2026-11-10T17:51:03.858Z","published",null,[24],{"id":25,"reviewer":26,"round":27,"reason":28,"status":29},"editor-r1","editor",1,"Tone down claims that go beyond the source: Windows Latest only 'didn't seem to receive' the new build (not 'never received'), and the source says only that some users, 'especially' on work machines, have Store auto-updates off, so drop or hedge the closing claim that 'many managed fleets switch off' the setting.","resolved","security",[32,33,34,35],"microsoft","windows-11","vulnerability","microsoft-paint",[37],{"name":38,"url":39},"PCGamer","https:\u002F\u002Fwww.pcgamer.com\u002Fsoftware\u002Fwindows\u002Fms-has-messily-patched-a-microsoft-paint-security-vulnerability-but-the-update-still-isnt-showing-up-for-some\u002F",0,{"sections":42},[43,48,52,57,62,67,72,77,82,87,92,97,102,107],{"name":44,"slug":45,"count":46,"latest_published_at":47},"AI","ai",7144,"2026-11-12T13:27:45.000Z",{"name":49,"slug":30,"count":50,"latest_published_at":51},"Security",1128,"2026-11-11T18:05:00.000Z",{"name":53,"slug":54,"count":55,"latest_published_at":56},"Deals","deals",642,"2026-11-12T14:00:00.000Z",{"name":58,"slug":59,"count":60,"latest_published_at":61},"Policy","policy",619,"2026-11-12T12:53:36.000Z",{"name":63,"slug":64,"count":65,"latest_published_at":66},"Consumer Tech","consumer-tech",364,"2026-11-12T11:12:32.000Z",{"name":68,"slug":69,"count":70,"latest_published_at":71},"Hardware","hardware",336,"2026-11-12T11:24:43.000Z",{"name":73,"slug":74,"count":75,"latest_published_at":76},"Science","science",230,"2026-11-12T10:00:00.000Z",{"name":78,"slug":79,"count":80,"latest_published_at":81},"Software","software",168,"2026-11-11T17:36:49.000Z",{"name":83,"slug":84,"count":85,"latest_published_at":86},"Startups","startups",159,"2026-11-11T12:30:00.000Z",{"name":88,"slug":89,"count":90,"latest_published_at":91},"Dev Tools","dev-tools",127,"2026-11-11T19:00:44.000Z",{"name":93,"slug":94,"count":95,"latest_published_at":96},"General","general",118,"2026-11-11T16:49:42.000Z",{"name":98,"slug":99,"count":100,"latest_published_at":101},"Gaming","gaming",107,"2026-11-12T10:09:03.000Z",{"name":103,"slug":104,"count":105,"latest_published_at":106},"Reviews","reviews",38,"2026-10-20T12:00:00.000Z",{"name":108,"slug":109,"count":110,"latest_published_at":111},"How-To","how-to",8,"2026-10-05T09:00:00.000Z"]