3 matches found
CVE-2023-28123: Incorrect Permission Assignment for Critical Resource
A permission misconfiguration in UI Desktop for Windows Version 0.59.1.71 and earlier could allow an user to hijack VPN credentials while UID VPN is starting.This vulnerability is fixed in Version 0.62.3 and later...
CVE-2023-28122: Improper Privilege Management
A local privilege escalation LPE vulnerability in UI Desktop for Windows Version 0.59.1.71 and earlier allows a malicious actor with local access to a Windows device running said application to submit arbitrary commands as SYSTEM.This vulnerability is fixed in Version 0.62.3 and later...
PT-2022-6222
Name of the Vulnerable Software and Affected Versions UI Desktop for Windows version 0.55.1.2 and earlier Description A local privilege escalation issue in UI Desktop for Windows allows a malicious actor with local access to a Windows device to run arbitrary commands as SYSTEM. This is related to...