7 matches found
SnipRecover-CLI
SnipRecover CLI Detection and restoration of Windows Snipping Tool PNG captures vulnerable to CVE-2023-28303 SnipRecover CLI is a minimal, dependency-free command-line utility designed to: Detect PNG files modified by the Windows Snipping Tool vulnerability CVE‑2023‑28303. Restore the original...
AntiCropalypse
March 31st, 2023 Update As of today, Discord's CDN now strips trailing data from PNGs in-flight, meaning that even old uploads are now safe from the aCropalypse vulnerability. As such, this bot is no longer necessary, but it will remain online to allow users to download their archived images. The...
CVE-2023-28303
CVE-2023-28303 affects Windows Snipping Tool and Snip & Sketch (Windows 10/11). The issue is an information-disclosure vulnerability where parts of a cropped image that were intended to be removed are not fully deleted and can be restored when saved. Root cause: incomplete removal of cropped imag...
CVE-2023-28303 Windows Snipping Tool Information Disclosure Vulnerability
...
Windows Snip & Sketch/ Snipping Tool CVE-2023-28303 (Acropalypse)
An information disclosure vulnerability exists in Windows Snip & Sketch Windows 10 and Snipping Tool Windows 11 where parts of a cropped image that were to be removed are not completely deleted and can be restored if saved to the cropped image file. Note that Nessus has not tested for this issue...
Microsoft Issues Patch for aCropalypse Privacy Flaw in Windows Screenshot Tools
Microsoft has released an out-of-band update to address a privacy-defeating flaw in its screenshot editing tool for Windows 10 and Windows 11. The issue, dubbed aCropalypse, could enable malicious actors to recover edited portions of screenshots, potentially revealing sensitive information that m...
