← Back to CVE List
CVE-2022-44875
KioWare through 8.33 on Windows sets KioScriptingUrlACL.AclActions.AllowHigh for the about:blank origin, which allows attackers to obtain SYSTEM access via KioUtils.Execute in JavaScript code.
> MITRE Terms of Use apply – see LICENSE‑MITRE.txt