MetaDefender Kiosk vulnerabilities

2 known vulnerabilities in MetaDefender Kiosk from Opswat. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Metadefender Kiosk: Buffer Copy without Checking Size of Input

  CVE-2023-36659Sep 15, 2023Opswat

  An issue was discovered in OPSWAT MetaDefender KIOSK 4.6.1.9996. Long inputs were not properly processed, which allows remote attackers to cause a denial of service (loss of communication).

• 9.8 Critical severity

  Metadefender Kiosk: Improper Privilege Management

  CVE-2023-36657Sep 15, 2023Opswat

  An issue was discovered in OPSWAT MetaDefender KIOSK 4.6.1.9996. Built-in features of Windows (desktop shortcuts, narrator) can be abused for privilege escalation.