CVE-2022-44875

KioWare through 8.33 on Windows sets KioScriptingUrlACL.AclActions.AllowHigh for the about:blank origin, which allows attackers to obtain SYSTEM access via KioUtils.Execute in JavaScript code...

CVE-2022-44875

KioWare through 8.33 on Windows sets KioScriptingUrlACL.AclActions.AllowHigh for the about:blank origin, which allows attackers to obtain SYSTEM access via KioUtils.Execute in JavaScript code...

CVE-2022-44875

KioWare (Windows) 8.33 and earlier versions are affected by CVE-2022-44875 due to KioScriptingUrlACL.AclActions.AllowHigh being set for the about:blank origin. This allows JavaScript code via KioUtils.Execute to obtain SYSTEM access. The vulnerability details across multiple sources confirm the r...