Approved changes feed: RSS · Atom

cpe:2.3:a:ui:desktop:*:*:*:*:*:windows:*:*

part: a version: * update: *

VendorUi (05cd6c40-c92e-5edc-9588-6ff25fd55039)
ProductDesktop (646c5e93-0c76-5108-8ce0-a6f4582e00e9)
Edition*
Language*
Software edition*
Target softwarewindows
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-28124 vulnerable 2026-06-08 06:01:09.702098 Details available
Improper usage of symmetric encryption in UI Desktop for Windows (Version 0.59.1.71 and earlier) could allow users with access to UI Desktop configuration files to decrypt their content.This vulnerability is fixed in Version 0.62.3 and later.
Published: 2023-04-19T00:00:00.000Z
Updated: 2025-02-05T15:25:22.401Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28123 vulnerable 2026-06-08 06:01:09.701769 Details available
A permission misconfiguration in UI Desktop for Windows (Version 0.59.1.71 and earlier) could allow an user to hijack VPN credentials while UID VPN is starting.This vulnerability is fixed in Version 0.62.3 and later.
Published: 2023-04-19T00:00:00.000Z
Updated: 2025-02-05T15:27:31.624Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28122 vulnerable 2026-06-08 06:01:09.701338 Details available
A local privilege escalation (LPE) vulnerability in UI Desktop for Windows (Version 0.59.1.71 and earlier) allows a malicious actor with local access to a Windows device running said application to submit arbitrary commands as SYSTEM.This vulnerability is fixed in Version 0.62.3 and later.
Published: 2023-04-19T00:00:00.000Z
Updated: 2025-02-05T15:30:04.825Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-35257 vulnerable 2026-06-08 05:46:04.433684 Details available
A local privilege escalation vulnerability in UI Desktop for Windows (Version 0.55.1.2 and earlier) allows a malicious actor with local access to a Windows device with UI Desktop to run arbitrary commands as SYSTEM.
Published: 2022-09-23T13:37:28.000Z
Updated: 2025-05-22T20:34:00.743Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.