Windows 11: Screenshot flaw lets you recover confidential data

A vulnerability has been discovered in the Windows 11 snipping tool. Allows attackers to access sensitive information in edited screenshots. Even if the user edited the screenshot to hide this data, the flaw would allow an attacker to access the original clipped information.

Besides a vulnerability known as aCropalypse discovered in Google’s Pixel phones, The Windows 11 snipping tool does not delete the original file information and leaves it appended to the end.makes it possible for a potential attacker to retrieve confidential information from the file and see the edited data.

holy damn.

Windows Snipping Tool is also vulnerable to Acropalypse.

A completely unrelated codebase.

Same exploit script works with minor changes (pixel format is RGB not RGBA)

I tested myself on Windows 11 https://t.co/5q2vb6jWOn pic.twitter.com/ovJKPr0x5Y

— David Buchanan (@David3141593) 21 March 2023

A fix for the vulnerability should be released soon. However, it shouldn’t fix the pre-generated screenshots issue. Therefore, users should check files to make sure no personal information has been exposed.

Windows 11 Patch Tuesday

Microsoft’s latest Patch Tuesday, released on March 14, fixed 83 Windows 11 vulnerabilities. The attacker remotely controls the system or compromises the stored data.

Among them, Microsoft patched a critical elevation of privilege vulnerability in Microsoft Outlook that allowed malicious emails to force a device to connect to an external website controlled by hackers, leak system information, and allow an attacker to authenticate as a victim to other services.

The company also fixed a vulnerability in Windows SmartScreen that allowed an attacker to bypass the system’s security defenses, resulting in a limited loss of integrity and usability of security features.