← back
CVE-2023-34642

CVE-2023-34642

CVSS 7.8 HIGHEPSS 0.3%CWE-78
Vexday Risk Score
21Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 7.8EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
19 Jun 2023Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
KioWare for Windows through v8.33 was discovered to contain an incomplete blacklist filter for blocked dialog boxes on Windows 10. This issue can allow attackers to open a file dialog box via the function showDirectoryPicker() which can then be used to open an unprivileged command prompt.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · n/a
References
https://github.com/huntergregal/CVE/tree/main/CVE-2023-34642https://github.com/huntergregal/CVE/tree/main/TBD-KIOWARE-002https://www.kioware.com/versionhistory.aspx?pid=15