CVE-2023-34642

KioWare for Windows through v8.33 was discovered to contain an incomplete blacklist filter for blocked dialog boxes on Windows 10. This issue can allow attackers to open a file dialog box via the function showDirectoryPicker which can then be used to open an unprivileged command prompt...

CVE-2023-34642

KioWare for Windows (through v8.33) contains an incomplete blacklist filter for blocked dialog boxes on Windows 10. This allows an attacker to trigger the file dialog via showDirectoryPicker(), which can be used to open an unprivileged command prompt. The CVE is documented with a HIGH impact (AV:...

CVE-2023-34641

KioWare for Windows through v8.33 was discovered to contain an incomplete blacklist filter for blocked dialog boxes on Windows 10. This issue can allow attackers to open a file dialog box via the function window.print which can then be used to open an unprivileged command prompt...