Description (CNA)
Some Microsoft technologies as used in Windows 8 through 11 allow a temporary client-side performance degradation during processing of multiple Unicode combining characters, aka a "Zalgo text" attack. NOTE: third parties dispute whether the computational cost of interpreting Unicode data should be considered a vulnerability.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://talk.dynalist.io/t/dynalist-is-vulnerable-to-zalgo/1234
- https://en.wikipedia.org/wiki/Zalgo_text
- https://aka.ms/windowsbugbar
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.