A remote code execution vulnerability affects the modern Microsoft Paint app from version 11.0.0.0 up to but not including 11.2605.91.0, with users reporting the fix is available through the Microsoft Store rather than Windows Update. Microsoft's advisory describes it as network-exploitable without authentication or user interaction, while discussion also raised concerns about malicious BMP files.