Possible disclosure risk: Win 10 & 11 Snip & Sketch crop leaves some original data

[pete]

Short version:

 

Buchanan says the issue also affects the "Snip and Sketch" tool in Windows 10, the app that became the basis of the new Windows 11 Snipping Tool. The old Windows Vista-era Snipping Tool, still included as a separate app in Windows 10, isn't affected by the bug.

 

Images cropped using Snip and Sketch in Windows 10 or 11 or the new Snipping Tool in Windows 11 leave at least some of the cropped data within the file.

Exploits exist for .PNG, not yet for .JPG

 

More info:

• https://arstechnica.com/information-technology/2023/03/windows-10-and-11-get-their-own-version-of-the-acropalypse-screenshot-bug
  
• Twitter thread as to why here:
  
  
• Side thread which implies similar issues have been about for a while on Windows, depending on the method used to save a file:
  
  

 

Mods: I debated between the Security forum and this one, both apply.

Edited March 23, 2023 by pete