olnor18/writeup

olnor18/writeup

Releases0
Stars2

CVE History

CVEPublishedCVSS v3CVSS v2
5.4 MEDIUM

KioWare through 8.33 on Windows sets KioScriptingUrlACL.AclActions.AllowHigh for the about:blank origin, which allows attackers to obtain SYSTEM access via KioUtils.Execute in JavaScript code.