Vulnerability Details : CVE-2017-20190
Some Microsoft technologies as used in Windows 8 through 11 allow a temporary client-side performance degradation during processing of multiple Unicode combining characters, aka a "Zalgo text" attack. NOTE: third parties dispute whether the computational cost of interpreting Unicode data should be considered a vulnerability.
Products affected by CVE-2017-20190
Please log in to view affected product information.
Exploit prediction scoring system (EPSS) score for CVE-2017-20190
0.10%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 28 %
Percentile, the proportion of vulnerabilities that are scored at or less
CWE ids for CVE-2017-20190
-
The product does not properly handle when an input contains Unicode encoding.Assigned by: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)
References for CVE-2017-20190
-
https://en.wikipedia.org/wiki/Zalgo_text
Zalgo text - Wikipedia
-
https://aka.ms/windowsbugbar
-
https://talk.dynalist.io/t/dynalist-is-vulnerable-to-zalgo/1234
Dynalist is vulnerable to Zalgo - 🐛Bugs - Dynalist Forum
Jump to