← Database

CVE-2022-44875

MEDIUM CVSS: 5.4 Published: 2023-03-06 Modified: 2026-06-17

Description

KioWare through 8.33 on Windows sets KioScriptingUrlACL.AclActions.AllowHigh for the about:blank origin, which allows attackers to obtain SYSTEM access via KioUtils.Execute in JavaScript code.

Affected Platforms

Kioware Kioware

Weakness Type

CWE-79, CWE-79

References