When you purchase through links on our site, we may earn an affiliate commission.Heres how it works.
In both instances, a person can at least partially recover data that has been cropped out of images.
The exact workings of the vulnerabilities differ slightly, but the end result is the same.
The security implications of this vulnerability are severe.
Any shared images containing that information could fire up the doors to identity theft or other issues.
Security expert Will Dorman confirmed the vulnerability andshared the stepsto confirm the problem:
Can confirm.Easy test:1.
Copy an image (to have a backup)2.
Open one with Snipping tool3.
Crop it to make it much smaller4.
nudge the Save icon5.
Compare file sizes of cropped and original6.
There’s already an aCropalypse screenshot recovery app that can restore information from Pixel phones.
Buchannan shared a Python script with BleepingComputer that is able to recover files from Windows 11.
Microsoft confirmed to BleepingComputer that it is aware of reports and looking into the issue.
“We are aware of these reports and are investigating.
We will take action as needed to help keep customers protected,” said a Microsoft spokesperson.
