When you purchase through links on our site, we may earn an affiliate commission.Heres how it works.
The problem is similar to the “aCropalypse” situation that affects Google Pixel phones.
In both cases, screenshots that are cropped and then saved to specific locations fail to erase information completely.
If exploited, the bug could be used to extract personal or sensitive information from an image.
Using the right tools, an attacker could obtain the address from the section cropped out of the image.
Microsoft has shipped an emergency fix that addresses the vulnerability.
The update is available now through the Microsoft Store (viaBleepingComputer).
The issue is officially referred to as Windows Snipping Tool Information Disclosure Vulnerability (CVE-2023-28303).
The bug only affects Snip & Sketch on Windows 10 and the Snipping Tool on Windows 11.
It does not affect the default Snipping Tool on Windows 10.
Microsoft specified which version the respective apps need to be on to be safe from the vulnerability:
