CVE-2017-20190

Some Microsoft technologies as used in Windows 8 through 11 allow a temporary client-side performance degradation during processing of multiple Unicode…

published March 26, 2024

CVSS
—
EPSS
0%
Percentile
16.9
In the wild
Unconfirmed
What it is

Some Microsoft technologies as used in Windows 8 through 11 allow a temporary client-side performance degradation during processing of multiple Unicode combining characters, aka a "Zalgo text" attack. NOTE: third parties dispute whether the computational cost of interpreting Unicode data should be considered a vulnerability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00262 · 16.9th percentile
Published
2024-03-26T00:00Z
EPSS history
Timeline
  • 26 MAR 00:00Z
    Some Microsoft technologies as used in Windows 8 through 11 allow a temporary client-side performance degradation during processing of multiple Unicode…
    cvelistv5