The crop tool kept the parts you cropped out
Windows Snipping Tool saved cropped images with the original data recoverable
The market's verdict: +1.5% on MSFT in the week after.
What actually happened
In March 2023, researchers found that Windows 11's Snipping Tool and Windows 10's Snip & Sketch had the acropalypse flaw: cropping a screenshot did not truncate the file, so anyone who received it could recover the parts you had carefully cut away. Every screenshot redacted before sharing, a medical record here, an address there, was potentially still inside. Microsoft shipped emergency Store updates within the week. The already-shared images, of course, stayed out there forever, cropped on the outside, intact on the inside.
This one is officially acknowledged.
Were you affected? Unbreak it
Emergency Store update shipped within the week
Microsoft has acknowledged this issue; a fix ships in an out-of-band or next cumulative update. Check Windows Release Health before manual workarounds.
Links
-
Impact
- BleepingComputer (publication)
-
Context
- Windows Central (publication)
↳ caused by Snipping Tool acropalypse (CVE-2023-28303)
Timeline
- Mar 21, 2023 Confirmed First reports came in.
- Mar 27, 2023 Fixed Emergency Snipping Tool updates pushed via the Microsoft Store.