MS has messily patched a Microsoft Paint security vulnerability, but the update still isn’t showing up for some

Microsoft's Paint application was unexpectedly thrust into the spotlight of cybersecurity concerns after the company disclosed and patched a security vulnerability on October 13. However, users may still encounter difficulties in receiving the update. Some individuals may not have automatic Microsoft Store updates enabled, particularly those on corporate computers.

To ensure security, users with Paint versions lower than 11.2609.401.0 should manually update the application via the Microsoft Store or run the command "powershell Get-AppxPackage -Name Microsoft.Paint | Select-Object Name, Version" in Windows PowerShell.

The confusion surrounding the update stems from conflicting reports from various sources. Initially, the vulnerability was considered severe with an 8.1 rating on the CVSS scale, but Microsoft later downgraded it to a 7.0 score on November 9. Additionally, Microsoft altered its description of the bug from a network attack vector to a local exploit, requiring users to open a crafted file.

Furthermore, some users experienced older versions being provided by the Microsoft Store, leading to uncertainty regarding the correct update.

To check for the updated Paint version, open the app, navigate to the Settings menu, and review the version number under the About Paint section. If the version is outdated, manually update the app through the Microsoft Store or use the provided Windows PowerShell command. If automatic updates are not permitted in Windows settings, users should contact their system administrator for assistance. Despite the mixed information, it is crucial to verify the Paint update status to maintain system security.