CVE-2023-34641

2023-06-1900:00:00

mitre

www.cve.org

kioware

windows

v8.33

incomplete filter

unauthorized access

dialog boxes

command prompt

EPSS

Percentile

5.1%

JSON

KioWare for Windows through v8.33 was discovered to contain an incomplete blacklist filter for blocked dialog boxes on Windows 10. This issue can allow attackers to open a file dialog box via the function window.print() which can then be used to open an unprivileged command prompt.