CyberSecBulletin

Kioware vulnerabilities

We track 3 vulnerabilities in Kioware products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on May 14, 2024.

3vulnerabilities
0critical
3high
0exploited
7.5average CVSS score

Latest Kioware vulnerabilities

  • 7.0 High severity

    Kioware: Improper Protection of Alternate Path

    CVE-2024-3460Kioware

    In KioWare for Windows (versions all through 8.34) it is possible to exit this software and use other already opened applications utilizing a short time window before the forced automatic logout occurs. Then, by using some built-in function of these applicatio

  • 7.8 High severity

    Kioware: Improper Protection of Alternate Path

    CVE-2024-3459Kioware

    KioWare for Windows (versions all through 8.34) allows to escape the environment by downloading PDF files, which then by default are opened in an external PDF viewer. By using built-in functions of that viewer it is possible to launch a web browser, search thr

  • 7.8 High severity

    Kioware: Improper Neutralization of Special Elements used in an OS Command

    CVE-2023-34642Kioware

    KioWare for Windows through v8.33 was discovered to contain an incomplete blacklist filter for blocked dialog boxes on Windows 10. This issue can allow attackers to open a file dialog box via the function showDirectoryPicker() which can then be used to open an