Lucene search

K
cvelistMitreCVELIST:CVE-2017-20190
HistoryMar 26, 2024 - 12:00 a.m.

CVE-2017-20190

2024-03-2600:00:00
mitre
www.cve.org
microsoft
windows
unicode
combining characters
zalgo text
attack
vulnerability

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

Some Microsoft technologies as used in Windows 8 through 11 allow a temporary client-side performance degradation during processing of multiple Unicode combining characters, aka a β€œZalgo text” attack. NOTE: third parties dispute whether the computational cost of interpreting Unicode data should be considered a vulnerability.

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

Related for CVELIST:CVE-2017-20190