I did the same, then ran:
Get-AppxPackage -Name Microsoft.Paint | Select-Object Name, Version
But I can only get Microsoft.Paint 11.2609.401.0 and Microsoft has said different things in different places, so it's not even clear if this has the fix or not.
This article has more info on the confusion they're causing: https://windowsforum.com/news/cve-2026-83844-windows-11-pain...
why get package after something that is obviously a malicious backdoor?
If I still mamaged any windows host, i would be deploying a remove-package script asap to the entire fleet.