Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Dos

#53615of 53,622
Vulnerabilities · 1
PT-2024-10599
N/A
2024-03-26
Microsoft · Windows 11 · CVE-2017-20190
**Name of the Vulnerable Software and Affected Versions** Microsoft Windows versions 8 through 11 **Description** The issue concerns a temporary client-side performance degradation that occurs when processing multiple Unicode combining characters, also known as a "Zalgo text" attack. This affects the processing of Unicode data. There is a dispute among third parties regarding whether the computational cost of interpreting Unicode data should be considered a vulnerability. **Recommendations** For Microsoft Windows versions 8 through 11, consider restricting the processing of multiple Unicode combining characters to minimize the risk of temporary performance degradation. As a temporary workaround, avoid using sequences of Unicode combining characters in client-side applications until a more robust solution is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.