Security Advisory

CVE-2022-44875

5.4
MEDIUM

Vulnerability Description

KioWare through 8.33 on Windows sets KioScriptingUrlACL.AclActions.AllowHigh for the about:blank origin, which allows attackers to obtain SYSTEM access via KioUtils.Execute in JavaScript code.
Published Date March 6, 2023
Official Source NIST NVD Advisory