CVE-2023-34642

HighCVSS 7.8

Published: 19/06/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.32%

23th percentile - higher than 23% of all known CVEs

Summary

KioWare for Windows through v8.33 was discovered to contain an incomplete blacklist filter for blocked dialog boxes on Windows 10. This issue can allow attackers to open a file dialog box via the function showDirectoryPicker(), which can then be used to open an unprivileged command prompt.

Risk Assessment

Exploitation of this vulnerability may allow attackers to gain access to an unprivileged command prompt, posing a risk of executing unauthorized commands on the system.

Recommendation

It is recommended to update KioWare to the latest version to mitigate this vulnerability and review application security to minimize risk.

Other vulnerabilities in KioWare for Windows

CVE-2023-34641High
KioWare for Windows through v8.33 was discovered to contain an incomplete blacklist filter for blocked dialog boxes on Windows 10. This issue can allow attackers to open a file dialog box via the function window.print() which can then be used to open an unprivileged command prompt.

Original NVD description (English source)

KioWare for Windows through v8.33 was discovered to contain an incomplete blacklist filter for blocked dialog boxes on Windows 10. This issue can allow attackers to open a file dialog box via the function showDirectoryPicker() which can then be used to open an unprivileged command prompt.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS