Threat actors can recover modified screenshot sections thanks to a Microsoft update that addresses a screenshot editing vulnerability in Windows. Microsoft claims that the Snip & Sketch application on Windows 10 and the Snipping Tool application on Windows 11 is affected by the security flaw, referred to as the “aCropalypse.”
This flaw could enable threat actors to recover the modified portions of screenshots, potentially disclosing sensitive information that had been cropped out or masking The Verge.
However, it only applies to photographs created using a particular set of procedures. These include photos taken, saved, edited, and saved over the original file. It also applies to pictures that have been opened in Snipping Tool, edited, and then saved to the exact location, the report said
Additionally, the security flaw does not affect screenshots copied and pasted into the body of an email or document or screenshots that have been updated before saving them. Microsoft previously found out about the issue a week ago.
According to the report, the security flaw allows hackers to undo changes made to screenshots, allowing them to show personal information in an image that someone thought they were hiding by cropping it out or scribbling over it.
You can download the most recent updates for the affected apps from the Microsoft Store by clicking Library, followed by Get updates.