CVE-2023-28303: Windows Snipping Tool Information Disclosure Vulnerability

Severity: low (CVSS 3.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-06-13 · updated 2026-06-17
Weakness: CWE-359

Description

Windows Snipping Tool Information Disclosure Vulnerability

Affected products

Microsoft Snip & Sketch: from 9.0 before 10.2008.3001.0 — fixed in 10.2008.3001.0
Microsoft Snipping Tool: from 11.0.0 before 11.2302.20.0 — fixed in 11.2302.20.0
Microsoft Snip & Sketch for Windows 10: from 9.0 before 10.2008.3001.0 — fixed in 10.2008.3001.0
Microsoft Snipping Tool: from 11.0.0 before 11.2302.20.0 — fixed in 11.2302.20.0

How to fix

Upgrade to a fixed version: Microsoft Snip & Sketch 10.2008.3001.0; Microsoft Snipping Tool 11.2302.20.0; Microsoft Snip & Sketch for Windows 10 10.2008.3001.0; Microsoft Snipping Tool 11.2302.20.0. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2023-28303 or the next vulnerability affects your stack