Kioware

7 CVEs across 2 Kioware products. Browse Kioware vulnerabilities, severities, and proof-of-concept exploits.

Kioware products with known CVEs

ProductCVEs
Kioware6
Kioware Server1
Kioware CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-3461Medium6.22024-05-14KioWare for Windows (versions all through 8.35) allows to brute force the PIN number, which protects the application from being closed, as there are no mechani…
CVE-2024-3460High7.42024-05-14In KioWare for Windows (versions all through 8.34) it is possible to exit this software and use other already opened applications utilizing a short time window…
CVE-2024-3459High8.42024-05-14KioWare for Windows (versions all through 8.34) allows to escape the environment by downloading PDF files, which then by default are opened in an external PDF…
CVE-2023-34642High7.82023-06-19KioWare for Windows through v8.33 was discovered to contain an incomplete blacklist filter for blocked dialog boxes on Windows 10. This issue can allow attacke…
CVE-2023-34641High7.82023-06-19KioWare for Windows through v8.33 was discovered to contain an incomplete blacklist filter for blocked dialog boxes on Windows 10. This issue can allow attacke…
CVE-2022-44875Medium5.42023-03-06KioWare through 8.33 on Windows sets KioScriptingUrlACL.AclActions.AllowHigh for the about:blank origin, which allows attackers to obtain SYSTEM access via Kio…
CVE-2018-18435High7.82019-03-21KioWare Server version 4.9.6 and older installs by default to "C:\kioware_com" with weak folder permissions granting any user full permission "Everyone: (F)" t…