CVE-2023-34642

2023-06-1900:00:00

mitre

www.cve.org

kioware

windows

v8.33

incomplete blacklist filter

unprivileged command prompt

dialog boxes

showdirectorypicker

cve-2023-34642

0.0004 Low

EPSS

Percentile

5.1%

JSON

KioWare for Windows through v8.33 was discovered to contain an incomplete blacklist filter for blocked dialog boxes on Windows 10. This issue can allow attackers to open a file dialog box via the function showDirectoryPicker() which can then be used to open an unprivileged command prompt.