Microsoft patches critical remote code execution flaw in Windows Paint

Microsoft has resolved a critical remote code execution vulnerability in its classic Windows Paint application, following a period of confusing communication regarding the security patch. The flaw, discovered last month, could allow attackers to execute malicious code on a victim's system by exploiting the image editor.

This vulnerability affects one of Windows' most ubiquitous and trusted built-in applications, meaning many users could be exposed. Microsoft has now released a clear patch, but the initial unclear messaging created unnecessary risk. Users should apply this update immediately to close this serious security hole.

What to do: Apply the latest Microsoft Windows security update that patches the Paint vulnerability.