BlockBeats news, November 7 — Binance founder CZ reposted a warning about a high-severity vulnerability in Microsoft Paint, stating: "Apps cannot protect you from OS vulnerabilities. Update your OS now."
It is reported that Microsoft has disclosed a Windows Paint vulnerability tracked as CVE-2026-83844, with a CVSS score of 8.1, affecting Microsoft Paint versions below 11.2605.91.0.
The vulnerability stems from an out-of-bounds read issue that could allow unauthenticated attackers to remotely execute malicious code without requiring user interaction. Microsoft has released a security patch, and there are currently no confirmed reports of active exploitation. CZ used this to remind users that application-layer security measures cannot replace the operating system's own security updates, and that system and software patches should be installed promptly.
