Most of the improvements were provided by the community and we are extremely grateful for their support! Besides that we appreciate every single help and interaction, some members of the community are even more outstanding, so a special thanks for @Christian-Schulz, @danrhodes and @FF-Brown they even combined their invested time to work, also with other contributors, on features and bugs together.
If you like Greenshot, please make sure you give us a star on https://github.com/greenshot/greenshot When companies want to support open source, one of their key criteria to select projects is the amount of stars on GitHub.
We strongly recommend that all Greenshot 1.3 users update to version 1.3.323. This release fixes several security issues:
CF_DIBV5 clipboard data could cause an out-of-bounds read and denial of service. We thank @hacker1984 for reporting this issue. See the GHSA-4674-75g5-79mx security advisory for details.Many of the fixes below were first developed for Greenshot 1.4 and have now been deliberately backported to 1.3, with credit retained for the contributors who made the original changes:
@weihongji added a setting in Greenshot.ini to configure the Border effect, giving you more control over the editor effect (PR #730). This was their first contribution to Greenshot—welcome, and thank you!
Robin Krom (@Lakritzator) improved the installer cleanup so it removes additional leftover files from older Greenshot versions (PR #1092).
Christian Schulz (@Christian-Schulz) made Greenshot 1.3 close automatically when the Greenshot 1.4 installer upgrades it through the Windows Restart Manager (PR #1109), preventing conflicts during the upgrade.
For a complete list of changes in the 1.3 series, see the Greenshot 1.3 changelog.
]]>This release addresses a security vulnerability. If you are running any earlier version of Greenshot 1.3, please update as soon as possible.
We have fixed a security issue tracked as GHSA-f8v9-7fph-fr2j. A huge thank you to @MarioRL0 for responsibly disclosing this vulnerability with a thorough, well-analyzed report. Responsible disclosure like this helps keep Greenshot safe for everyone.
All technical details can be found in the security advisory. Less technical summary: when you double-click Greenshot’s tray icon, Greenshot opens the folder containing your most recent screenshot by starting Windows Explorer. In affected versions, this was done by launching "explorer.exe" without an absolute path.
On Windows, starting a program by name (instead of e.g. C:\Windows\explorer.exe) can cause Windows to search for that program in multiple locations. If an attacker is able to place a malicious explorer.exe in a location that Windows checks before the real Windows one, Greenshot could accidentally start the attacker’s program instead. That attacker-controlled program could then run code in your user context (and even start the real Explorer afterwards, so things still “look normal”).
Alongside the security fix, we have backported several bug fixes from the 1.4 development branch that address real-world issues reported by our users:
We have also improved the installer to prevent issues caused by leftover files from older versions of Greenshot. The installer now automatically removes outdated 1.2 and 1.3 plugin files before placing the new ones — so you get a clean, consistent installation every time. Only plugins originally provided by Greenshot are affected by this cleanup.
Greenshot 1.3.315 is the final planned stable release of the 1.3 series. Our development focus has moved to the 1.4 series, which is currently in active development on the main branch. The 1.4 series brings exciting new capabilities including emoji support in the editor, OCR-based text redaction, and a new high-quality capture engine powered by the Windows Graphics Capture API.
We are grateful to everyone who has contributed to, tested, and reported issues for the 1.3 series. Your feedback has made Greenshot better.
For a complete list of all changes in the 1.3 series — including technical details, issue references, and contributor credits — see the Greenshot 1.3 Changelog.
]]>Kudos to Github user @lihnucs, who has responsibly disclosed the problem to us with a very detailed and well-analyzed report. Thanks a lot 💚
All technical details can be found in the security advisory security advisory GHSA-7hvw-q8q5-gpmj. Less technical summary: if you are using Greenshot’s External Command Plugin to call shell interpreters (like CMD or Powershell), an attacker could execute custom commands by fiddling with Greenshot’s configuration file on your PC, or by making you open a file with a manipulated filename.
Stay safe, and remember: always get Greenshot from getgreenshot.org
]]>Kudos to Github user @RipFran, who has responsibly disclosed the problem to us with a very detailed and well-analyzed report, and also helped with re-testing after we implemented a fix. Thanks so much 💚
All technical details can be found in the security advisory GHSA-8f7f-x7ww-xx5.
Less technical summary: if a malicious process is already running on your computer, it could send a crafted message to the Greenshot process, making it execute functionality under Greenshot’s name.
This vulnerability could be leveraged by an attacker to by-pass security measures that could, for example, block the creation of new processes by untrusted processes.
Stay safe, and remember: always get Greenshot from getgreenshot.org
]]>Update 2025-07-17: we have published a bug fix release (v1.3.202) which fixes some problems when running the installer as administrator.
We’re excited to announce the release of Greenshot v1.3.290 (Final Release) – a significant step forward for one of the most popular open-source screenshot tools for Windows. This version introduces new features, UI improvements, and important bug fixes that refine the overall user experience.
Greenshot 1.2.10 and below allowed arbitrary code execution because .NET content is insecurely deserialized when a .greenshot file is opened. This long awaited fix has already been provided in unstable versions and now found it’s way into the final release of version 1.3.
One of the most requested features is finally here:
✅ Zoom functionality in the editor – Easily zoom in and out using CTRL + mouse wheel, allowing for better precision when editing screenshots.
This release also tackles several issues that have affected usability and stability:
Greenshot v1.3.290 RC1 is a robust, more polished version that lays the groundwork for future development. Whether you’re a power user or a casual screenshot taker, this release offers more control, sharper performance, and cleaner usability.
Here is the full list of changes since the latest Greenshot 1.2 version
Head over to our version history page to download Greenshot 1.3.290 RC1.
A huge thank you to all our contributors and users for your ongoing support. We couldn’t do this without you!
Stay tuned for the final release, and happy screenshotting!
Here is the full list of changes since the latest Greenshot 1.2 version
Finally, we are able to create signed releases again 🎉 it took quite some time and effort, and we have learned that code signing for Windows is much more complicated than it was just a few years ago. This step is crucial in our mission, and the basis for the next steps to come.
For starters, we have recently released a signed installer of a recent unstable version (1.3.281), you can find it on our version history page. If the missing signing was the only reason for you not to switch to one of the unstable versions, you can now go ahead and grab it. Please note that this is still an unstable release, which means it hasn’t been thoroughly tested and might include unexpected behavior. Also note that (automated) continuous builds are not signed.
Our top priority is to publish a final (stable) version of Greenshot 1.3 as soon as possible, for future versions we are aiming for smaller releases and shorter release cycles. For the 1.3 release, this means:
Stay tuned 😎
]]>You haven’t heard from us for a long time, so it’s high time we gave you an update.
tl;dr: We are struggling with a lack of time, but are gradually trying to pick up speed again.
You may have noticed that the activity in this project has decreased a lot recently: the last release was a while ago, tickets remain unanswered for a long time, etc. Occasionally people have asked whether the project has been abandoned or whether (and when) a new release is coming.
You probably know that this project is run by a few people entirely in their spare time, that’s the little time we have left beneath our full-time jobs, families, homes, etc. At the moment, our capacities are more limited than ever before. Of course, this is clearly noticeable in our communication with you, and our internal communication is also affected by this, which slows some things down even more.
In addition, we are currently not in a position to publish signed releases. This is due to organizational issues that we need to clarify. Our goal is to get all the issues sorted out bit by bit so that we can hopefully provide a stable release again soon.
For everyone who can’t wait: there are also unstable releases available. „Unstable“ means that the releases are not signed (Windows probably displays a warning before installation - make sure to always get Greenshot from getgreenshot.org). „Unstable“ also means that the releases have not been thoroughly tested, so unexpected behavior can occur. But „unstable“ also means that the release contains bleeding edge features, and some quite interesting things have been developed since the last stable release.
So, please bear with us. We’re doing our best to get everything running again, but it will take some time.
]]>we hope you’re doing well during the corona crisis and you all stay healthy!
While many of you are working from home at the moment we noticed an increase of downloads escpacially of the mac version of Greenshot and so we finally managed to put out a new release of Greenshot. It mainly fixes some issues with Catalina.
As you might have noticed, Catalina introduced some major changes regarding security and so every app requiring screen recording needs permission by the user. When you started Greenshot on Catalina for the first time, you got a popup window telling you so, but you might have ignored it (don’t we all do this?). If so, all your screenshots will only have your desktop background image and nothing else. To fix this, go to “System Preferences -> Security & Privacy -> Privacy -> Screen Recording” and activate Greenshot.
We are very sorry for not being able to release for such a long time but we all really had so much going on in our private lives that it just wasn’t manageable for us. I hope, this is going to change in the near future. Anyway, we are still very excited about developing Greenshot and have great plans for the future to keep Greenshot a big part of the productivity ecosystem.
Have fun, stay safe and wash your hands! ;-)
]]>TL;DR: always get greenshot from getgreenshot.org
Recently we have been contacted by a user who reported that he got a malware warning on an installer that he had downloaded from what he thought was our website. It did not take us long to sort out what the actual problem was: he had openend a browser, typed “greenshot” and appended a top-level-domain that is commonly being used for free and open source software, assuming that this URL would bring him to Greenshot’s official website. The site does not look very professional, but it clearly describes Greenshot’s features and has prominent download buttons for Windows and Mac. So what could possibly go wrong?
Well, unfortunatey that domain is not (and has never been) under our control. In fact, the domain had already been registered when Greenshot’s website was still living on a subdomain on sourceforge.net, ages ago. When we first noticed it, the page could have been (euphemistically) classified as fan page. It offered some information and screenshots of our software, had download links to our binaries on Sourceforge, and had multiple advertisements, particularly but not exclusively for an well-known commercial screenshot tool. Questionable, but tolerable. Obviously not profitable, though. So at some point they have started serving modified binaries, presumably installing unwanted toolbars in the user’s browser.
According to the privacy policy, the website is operated by a French company called “Data Access Sarl”, while the responsible editor of the content is “In Profit Limited” from Hong Kong. A short research on the web revealed that this pair is running dozens of similar websites for other well-known open-source projects, including 7-Zip, KeePass, Paint.NET, Gimp, Inkscape and many others. We probably only saw the tip of the iceberg, but the vast amount of registered domains named after open-source projects is a clear sign that deliberatly misleading users is merely a business case for them.
Honestly, we don’t know. We are software engineers, not lawyers. You probably know that Greenshot is (and has always been) developed by few guys in the little spare time they have beneath their full-time jobs and families, so we cannot afford both time and money to pursue this legally. If you can, feel free to get in touch with us.
Take care everybody, and remember: always get greenshot from getgreenshot.org :)
]]>