Greenshot 1.3.323: Your Screenshot Tool Just Got a Serious Security Upgrade
Greenshot 1.3.323 fixes TLS validation, clipboard and SVG security issues and backports editor and capture crash fixes from 1.4.
Screenshot tools are the kind of software we install once and then forget about. They sit in the tray, they capture what we need, and nobody worries about them. Greenshot 1.3.323, released on October 8, 2026, is a good reminder that even the most harmless-looking utility deserves an update now and then, because this release closes several real security holes. The Greenshot team itself strongly recommends that every user of the 1.3 series install it.
Security fixes come first
The most serious issue concerned TLS. Certificate validation had been disabled for the entire process, which in theory exposed OAuth tokens and uploads to services like Imgur, Dropbox and Jira to man-in-the-middle attacks. If you use Greenshot to send captures straight to one of those services, that's not something you want to leave open, and it's now fixed.
Two more vulnerabilities have been closed as well. Manipulated clipboard data in the CF_DIBV5 format could trigger an out-of-bounds read and crash the program, and opening a crafted SVG file could lead to server-side request forgery. On top of that, the bundled components have been refreshed, including Inno Setup 6.2.2 (CVE-2025-15595) and log4net 3.3.0 (CVE-2026-40021).
More stability, borrowed from 1.4
The developers have also brought a batch of fixes back from the newer 1.4 branch. The editor crashes less often, saving to locked files now works properly, and crashes related to icon sizes and region capture have been eliminated. Users of RemoteApp or RAIL sessions will be glad to hear that the tray icon no longer disappears, and errors with toast notifications are fixed too.
A few smaller touches round out the release. A new setting in Greenshot.ini lets you configure the Border effect, the installer clears out more leftover files from older versions, and Greenshot 1.3 now closes automatically when the 1.4 installer upgrades it through the Windows Restart Manager.
Our verdict
Install this one today. If you upload screenshots to Imgur, Dropbox, Jira or similar services, the TLS fix alone is reason enough. Even if you only save captures locally, you still get a more stable editor and a tidier installation. It's a free update that takes a minute, and it makes a trusted tool trustworthy again.
Get it on UpdateStar
Grab the latest version from the Greenshot product page on UpdateStar. If you'd like to compare it with other capture tools, our Greenshot alternatives page covers Lightshot, PicPick, Ashampoo Snap and more.
about author
