1 matches found
CVE-2022-44875: Improper Neutralization of Input During Web Page Generation
KioWare through 8.33 on Windows sets KioScriptingUrlACL.AclActions.AllowHigh for the about:blank origin, which allows attackers to obtain SYSTEM access via KioUtils.Execute in JavaScript code...
5.4CVSS5.9AI score0.00572EPSS
SaveExploits1References3
20