CZ warns of Windows system vulnerability risks: apps cannot defend against OS-level vulnerabilities, urges users to update their systems immediately.

November 7 — Binance founder CZ reposted a warning about a high-risk vulnerability in Microsoft Paint and stated: "Applications cannot protect you from operating system vulnerabilities. Please update your operating system immediately."

It is reported that Microsoft has disclosed a Windows Paint vulnerability tracked as CVE-2026-83844, with a CVSS score of 8.1, affecting Microsoft Paint versions below 11.2605.91.0.

The vulnerability stems from an out-of-bounds read issue and may allow unauthenticated attackers to remotely execute malicious code without requiring user interaction. Microsoft has released a security patch, and there are currently no confirmed reports of active exploitation. CZ used this to remind users that application-layer security measures cannot replace the operating system's own security updates, and system and software patches should be installed promptly.