Also Narrator feature can leak data from Windows 10's login screen

Besides the Windows 10 lockscreen we reported about yesterday, also the Narrator feature of Microsoft's latest OS allows access to information copied to the clipboard. Norwegian security researcher Oddvar Moe discovered that when accessing the help function of the feature it's possible to paste the contents of the clipboard.

Windows 10's Narrator feature is one of the operating system's assistive technologies which can read out loud any text on the screen to visually impaired computer users. The feature can be accessed on the lockscreen with the Windows Key + Enter.

With CAPSLOCK + F, the Narrator's help function can be started and in the 'search for all commands' textbox, data can be copied from the clipboard. This all without being logged in. This provides possible attackers to the information on the clipboard.

Like yesterday's method, also this isn't directly a serious threat and has limited potential ways of attacking someone. Nevertheless, one would expect that information on the clipboard is safe from prying eyes when not logged in to the OS.

No posts to display