CVE-2023-1189

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

A vulnerability was found in WiseCleaner Wise Folder Hider 4.4.3.202. It has been declared as problematic. Affected by this vulnerability is the function 0x222400/0x222404/0x222410 in the library WiseFs64.sys of the component IoControlCode Handler. The manipulation leads to denial of service. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The identifier VDB-222361 was assigned to this vulnerability.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-404

Affected software

Vendor	Product	Versions
WiseCleaner	Wise Folder Hider	4.4.3.202

References

https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1189Exploit, Third Party Advisory
https://vuldb.com/?ctiid.222361Permissions Required, Third Party Advisory, VDB Entry
https://vuldb.com/?id.222361Third Party Advisory, VDB Entry
https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1189Exploit, Third Party Advisory
https://vuldb.com/?ctiid.222361Permissions Required, Third Party Advisory, VDB Entry
https://vuldb.com/?id.222361Third Party Advisory, VDB Entry

Timeline

Published: Mar 6, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-11907.8A vulnerability was found in xiaozhuai imageinfo up to 3.0.3. It has been rated as problematic. Affected by this issue is some unknown funct CVE-2023-11917.2A vulnerability classified as problematic has been found in fastcms. This affects an unknown part of the file admin/TemplateController.java CVE-2023-11926.5A use-after-free flaw was found in smb2_is_status_io_timeout() in CIFS in the Linux Kernel. After CIFS transfers response data to a system c CVE-2023-11936.5A use-after-free flaw was found in setup_async_work in the KSMBD implementation of the in-kernel samba server and CIFS in the Linux kernel. CVE-2023-11948.1An out-of-bounds (OOB) memory read flaw was found in parse_lease_state in the KSMBD implementation of the in-kernel samba server and CIFS in CVE-2023-11955.5A use-after-free flaw was found in reconn_set_ipaddr_from_hostname in fs/cifs/connect.c in the Linux kernel. The issue occurs when it forget CVE-2023-11968.8The Advanced Custom Fields (ACF) Free and Pro WordPress plugins 6.x before 6.1.0 and 5.x before 5.12.5 unserialize user controllable data, w CVE-2023-11974.8Cross-site Scripting (XSS) - Stored in GitHub repository uvdesk/community-skeleton prior to 1.1.0.CVE-2023-11989.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saysis Starcities allows SQL Injection CVE-2023-12005.4A vulnerability was found in ehuacui bbs. It has been declared as problematic. This vulnerability affects unknown code. The manipulation of CVE-2023-12016.5Improper access control in the secure messages feature in Devolutions Server 2022.3.12 and below allows an authenticated attacker that posse CVE-2023-12026.5Permission bypass when importing or synchronizing entries in User vault in Devolutions Remote Desktop Manager 2023.1.9 and prior versions