[ctx]ctxseccontext security: attacks on the harness and context layer of AI agents, plus exploited-now news, hunting and playbooks.

← Tips & Guides · markdown

official (Microsoft MSRC CVE-2026-83844, fixedBuildNumber 11.2609.401.0 via Store); not known exploited; Customer Action Required

Tip: Paint CVE-2026-83844 fix is Store-only — check every user copy and the provisioned package for 11.2609.401.0+

  • As admin PowerShell: Get-AppxPackage -AllUsers -Name Microsoft.Paint | Select Version and Get-AppxProvisionedPackage -Online | Where DisplayName -eq 'Microsoft.Paint' | Select Version.
  • Anything below 11.2609.401.0: trigger Store app updates (or Intune Store scan) and re-check. Do not trust scanners that still treat ≥11.2605.91.0 as fixed — that older number is what the CVE text historically listed.
  • No MSRC workaround; unused fleets can remove Paint for all users and the provisioned copy until confirmed current.

Sources: Microsoft Security Update Guide: CVE-2026-83844 · The Hacker News: Paint RCE fix is in the Store, not Windows Update (Nov 6) · NCSC-NL alert (Nov 6)