VULNERABILITY INTELLIGENCE
CVE-2017-20190
EPSS probability0.26%
CISA KEVNot currently listed
Published2024-03-27
Last modified2026-06-17
Description
Some Microsoft technologies as used in Windows 8 through 11 allow a temporary client-side performance degradation during processing of multiple Unicode combining characters, aka a "Zalgo text" attack. NOTE: third parties dispute whether the computational cost of interpreting Unicode data should be considered a vulnerability.
Weakness classification
- CWE-176: Improper Handling of Unicode Encoding