CVE-2022-44875

2023-03-0600:00:00

mitre

www.cve.org

kioware

system access

javascript code

windows

cve-2022-44875

AI Score

5.7

Confidence

High

EPSS

0.001

Percentile

25.6%

JSON

KioWare through 8.33 on Windows sets KioScriptingUrlACL.AclActions.AllowHigh for the about:blank origin, which allows attackers to obtain SYSTEM access via KioUtils.Execute in JavaScript code.

References

github.com/olnor18/writeup/tree/master/CVE/CVE-2022-44875

www.kioware.com/versionhistory.aspx?pid=15