https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-3461.htmlhttps://patchthecve.com/cve/CVE-2024-3461.htmlWed, 17 Jun 2026 07:44:18 +0000MEDIUM 6.2: KioWare for Windows (versions all through 8.35) allows to brute force the PIN number, which protects the application from being closed, as there are no mechanisms preventing a user from excessively guessing the number. https://patchthecve.com/cve/CVE-2024-3460.htmlhttps://patchthecve.com/cve/CVE-2024-3460.htmlWed, 17 Jun 2026 07:44:18 +0000HIGH 7.4: In KioWare for Windows (versions all through 8.34) it is possible to exit this software and use other already opened applications utilizing a short time window before the forced automatic logout occurs. Then, by using some built-in function of these applications, one may launch any other programs.  https://patchthecve.com/cve/CVE-2024-3459.htmlhttps://patchthecve.com/cve/CVE-2024-3459.htmlWed, 17 Jun 2026 07:44:18 +0000HIGH 8.4: KioWare for Windows (versions all through 8.34) allows to escape the environment by downloading PDF files, which then by default are opened in an external PDF viewer. By using built-in functions of that viewer it is possible to launch a web browser, search through local files and, subsequently, launhttps://patchthecve.com/cve/CVE-2023-34642.htmlhttps://patchthecve.com/cve/CVE-2023-34642.htmlWed, 17 Jun 2026 06:03:54 +0000HIGH 7.8: KioWare for Windows through v8.33 was discovered to contain an incomplete blacklist filter for blocked dialog boxes on Windows 10. This issue can allow attackers to open a file dialog box via the function showDirectoryPicker() which can then be used to open an unprivileged command prompt.https://patchthecve.com/cve/CVE-2023-34641.htmlhttps://patchthecve.com/cve/CVE-2023-34641.htmlWed, 17 Jun 2026 06:03:54 +0000HIGH 7.8: KioWare for Windows through v8.33 was discovered to contain an incomplete blacklist filter for blocked dialog boxes on Windows 10. This issue can allow attackers to open a file dialog box via the function window.print() which can then be used to open an unprivileged command prompt.