Local Privilege Escalation (LPE) Vulnerability in UI Desktop for Windows (Version 0.59.1.71 and earlier)

CVE-2023-28122 · HIGH Severity

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A local privilege escalation (LPE) vulnerability in UI Desktop for Windows (Version 0.59.1.71 and earlier) allows a malicious actor with local access to a Windows device running said application to submit arbitrary commands as SYSTEM.This vulnerability is fixed in Version 0.62.3 and later.

Learn more about our Cis Benchmark Audit For Desktop Software.