Approved changes feed: RSS · Atom
cpe:2.3:a:kioware:kioware:*:*:*:*:*:windows:*:*
part: a version: * update: *
| Vendor | Kioware (817707a0-19c7-57a3-b9bd-7d7f95db67f1) |
|---|---|
| Product | Kioware (433e8974-fd56-587c-9d91-950af9ffb33a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | windows |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-3461 |
vulnerable | 2026-06-08 06:41:53.338181 |
Details available
MEDIUM (6.2)
KioWare for Windows (versions all through 8.35) allows to brute force the PIN number, which protects the application from being closed, as there are no mechanisms preventing a user from excessively guessing the number.
Published: 2024-05-09T10:14:11.615Z
Updated: 2024-08-01T20:12:07.165Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3460 |
vulnerable | 2026-06-08 06:41:53.337607 |
Details available
HIGH (7.4)
In KioWare for Windows (versions all through 8.34) it is possible to exit this software and use other already opened applications utilizing a short time window before the forced automatic logout occurs. Then, by using some built-in function of these applications, one may launch any other programs.
In order to exploit this vulnerability external applications must be left running when the KioWare software is launched. Additionally, an attacker must know the PIN set for this Kioware instance and also slow down the application with some specific task which extends the usable time window.
Published: 2024-05-09T10:13:37.634Z
Updated: 2024-08-01T20:12:06.924Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3459 |
vulnerable | 2026-06-08 06:41:53.336350 |
Details available
HIGH (8.4)
KioWare for Windows (versions all through 8.34) allows to escape the environment by downloading PDF files, which then by default are opened in an external PDF viewer. By using built-in functions of that viewer it is possible to launch a web browser, search through local files and, subsequently, launch any program with user privileges.
Published: 2024-05-09T10:13:03.813Z
Updated: 2024-08-01T20:12:07.655Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-34642 |
vulnerable | 2026-06-08 06:06:25.770306 |
Details available
KioWare for Windows through v8.33 was discovered to contain an incomplete blacklist filter for blocked dialog boxes on Windows 10. This issue can allow attackers to open a file dialog box via the function showDirectoryPicker() which can then be used to open an unprivileged command prompt.
Published: 2023-06-19T00:00:00.000Z
Updated: 2024-12-11T18:59:04.975Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-34641 |
vulnerable | 2026-06-08 06:06:25.769750 |
Details available
KioWare for Windows through v8.33 was discovered to contain an incomplete blacklist filter for blocked dialog boxes on Windows 10. This issue can allow attackers to open a file dialog box via the function window.print() which can then be used to open an unprivileged command prompt.
Published: 2023-06-19T00:00:00.000Z
Updated: 2024-12-11T19:59:46.514Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-44875 |
vulnerable | 2026-06-08 05:50:35.009395 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.