Skip to content
OpenAdvisories
High · 7.8 CVE-2023-28122 EUVD-2023-31833GHSA-8vh6-crr8-5pf8

A local privilege escalation (LPE) vulnerability in UI Desktop for Windows (Version 0.59.1.71 and earlier) allows a malicious actor with lo…

Published Apr 19, 2023 · Updated Feb 5, 2025 · Assigned by hackerone

Description

A local privilege escalation (LPE) vulnerability in UI Desktop for Windows (Version 0.59.1.71 and earlier) allows a malicious actor with local access to a Windows device running said application to submit arbitrary commands as SYSTEM.This vulnerability is fixed in Version 0.62.3 and later.

Affected products

VendorProductAffectedFixed
— UI Desktop for Windows Fixed on Version 0.62.3 or later. —

References