Desktop

desktop

Vendor: Ui • 4 CVEs

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-28124 1Ui 1Desktop Feb 5, 2025 Apr 19, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Improper usage of symmetric encryption in UI Desktop for Windows (Version 0.59.1.71 and earlier) could allow users with access to UI Desktop configuration files to decrypt their content.This vulnerability is fixed in Ver...Show more Improper usage of symmetric encryption in UI Desktop for Windows (Version 0.59.1.71 and earlier) could allow users with access to UI Desktop configuration files to decrypt their content.This vulnerability is fixed in Version 0.62.3 and later.Show less
CVE-2023-28123 1Ui 1Desktop Feb 5, 2025 Apr 19, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 A permission misconfiguration in UI Desktop for Windows (Version 0.59.1.71 and earlier) could allow an user to hijack VPN credentials while UID VPN is starting.This vulnerability is fixed in Version 0.62.3 and later.
CVE-2023-28122 1Ui 1Desktop Feb 5, 2025 Apr 19, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 A local privilege escalation (LPE) vulnerability in UI Desktop for Windows (Version 0.59.1.71 and earlier) allows a malicious actor with local access to a Windows device running said application to submit arbitrary comma...Show more A local privilege escalation (LPE) vulnerability in UI Desktop for Windows (Version 0.59.1.71 and earlier) allows a malicious actor with local access to a Windows device running said application to submit arbitrary commands as SYSTEM.This vulnerability is fixed in Version 0.62.3 and later.Show less
CVE-2022-35257 1Ui 1Desktop May 22, 2025 Sep 23, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 A local privilege escalation vulnerability in UI Desktop for Windows (Version 0.55.1.2 and earlier) allows a malicious actor with local access to a Windows device with UI Desktop to run arbitrary commands as SYSTEM.