CVE-2023-28122

—

CVSS 3.1

7.8 high

EPSS

<1%p5

Published

Apr 19, 2023 (Apr 19, 2023)

Modified

Jun 17, 2026

Description

A local privilege escalation (LPE) vulnerability in UI Desktop for Windows (Version 0.59.1.71 and earlier) allows a malicious actor with local access to a Windows device running said application to submit arbitrary commands as SYSTEM.This vulnerability is fixed in Version 0.62.3 and later.

Vendors: ui
Products: desktop
Weakness: CWE-269
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.