CVE-2023-28122 in UI Desktop

Sumário

de MITRE • 19/04/2023

A local privilege escalation (LPE) vulnerability in UI Desktop for Windows (Version 0.59.1.71 and earlier) allows a malicious actor with local access to a Windows device running said application to submit arbitrary commands as SYSTEM.This vulnerability is fixed in Version 0.62.3 and later.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Reservar: 10/03/2023
• Divulgação: 19/04/2023
• Moderação: aceite
• Entrada: VDB-226888
• CPE: pronto
• CWE: Desconhecido
• CVSS: 7.8 (NVD)
• EPSS: 0.00157
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-28122
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-28122
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-28122/