CVE-2023-34641

12th percentile - higher than 12% of all known CVEs

KioWare for Windows through v8.33 was discovered to contain an incomplete blacklist filter for blocked dialog boxes on Windows 10. This issue can allow attackers to open a file dialog box via the function window.print() which can then be used to open an unprivileged command prompt.

Exploitation of this vulnerability may allow attackers to gain access to unauthorized commands on the system, posing a serious security threat to the organization.

It is recommended to update KioWare to the latest version to mitigate this vulnerability and implement additional security measures to restrict access to the window.print() function.