CZ warns of Windows system vulnerability risk: applications cannot defend against operating system-level vulnerabilities, urging users to update their systems immediately

Binance founder CZ retweeted a warning about a critical vulnerability in Microsoft Paint, stating: "The application cannot protect you from operating system vulnerabilities, please update your operating system immediately."

It is reported that Microsoft has disclosed a Windows Paint vulnerability numbered CVE-2026-83844, with a CVSS score of 8.1, affecting versions of Microsoft Paint below 11.2605.91. The vulnerability stems from an out-of-bounds read issue, which could allow an unauthenticated attacker to remotely execute malicious code without user interaction. Microsoft has released a security patch, and there have been no confirmed reports of the vulnerability being actively exploited. CZ uses this to remind users that application layer security measures cannot replace the security updates of the operating system itself, and system and software patches should be installed promptly.