CVE-2023-34642

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

KioWare for Windows through v8.33 was discovered to contain an incomplete blacklist filter for blocked dialog boxes on Windows 10. This issue can allow attackers to open a file dialog box via the function showDirectoryPicker() which can then be used to open an unprivileged command prompt.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

No affected versions have been published.

Timeline

Published
Jun 19, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-346449.8Remote code execution vulnerability in Ruijie Networks Product: RG-EW series home routers and repeaters EW_3.0(1)B11P204, RG-NBS and RG-S193CVE-2023-346457.5jfinal CMS 5.1.0 has an arbitrary file read vulnerability.CVE-2023-346476.1PHPgurukl Hostel Management System v.1.0 is vulnerable to Cross Site Scripting (XSS).CVE-2023-346486.1A Cross Site Scripting vulnerability in PHPgurukl User Registration Login and User Management System with admin panel v.1.0 allows a local aCVE-2023-34656.1A vulnerability was found in SimplePHPscripts Classified Ads Script 1.8. It has been declared as problematic. Affected by this vulnerabilityCVE-2023-346506.1PHPgurukl Small CRM v.1.0 is vulnerable to Cross Site Scripting (XSS).CVE-2023-346516.1PHPgurukl Hospital Management System v.1.0 is vulnerable to Cross Site Scripting (XSS).CVE-2023-346526.1PHPgurukl Hostel Management System v.1.0 is vulnerable to Cross Site Scripting (XSS) via Add New Course.CVE-2023-346546.1taocms <=3.0.2 is vulnerable to Cross Site Scripting (XSS).CVE-2023-346568.8An issue was discovered with the JSESSION IDs in Xiamen Si Xin Communication Technology Video management system 3.1 thru 4.1 allows attackerCVE-2023-346574.8A stored cross-site scripting (XSS) vulnerability in Eyoucms v1.6.2 allows attackers to execute arbitrary web scripts or HTML via a crafted CVE-2023-346585.3Telegram v9.6.3 on iOS allows attackers to hide critical information on the User Interface via calling the function SFSafariViewController.