UI Desktop vulnerabilities

4 CVEs affecting UI Desktop, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-28124, published 2023-04-19.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-35257, published 2022-09-23. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A local privilege escalation vulnerability in UI Desktop for Windows (Version 0.55.1.2 and earlier) allows a malicious actor with local access to a Windows device with UI Desktop to run arbitrary…
CVE-2023-28123, published 2023-04-19. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. A permission misconfiguration in UI Desktop for Windows (Version 0.59.1.71 and earlier) could allow an user to hijack VPN credentials while UID VPN is starting.This vulnerability is fixed in Version…
CVE-2023-28122, published 2023-04-19. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A local privilege escalation (LPE) vulnerability in UI Desktop for Windows (Version 0.59.1.71 and earlier) allows a malicious actor with local access to a Windows device running said application to…
CVE-2023-28124, published 2023-04-19. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. Improper usage of symmetric encryption in UI Desktop for Windows (Version 0.59.1.71 and earlier) could allow users with access to UI Desktop configuration files to decrypt their content.This…