Approved changes feed: RSS · Atom

cpe:2.3:a:ubisoft:uplay:63.0.5699.0:*:*:*:*:*:*:*

part: a version: 63.0.5699.0 update: *

VendorUbisoft (526080b7-7f12-5af6-b1f9-9e1f714227e5)
ProductUplay (0524304a-015e-5ee3-b6f0-78119906dfee)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-15832 vulnerable 2026-06-08 05:11:03.643927 Details available
upc.exe in Ubisoft Uplay Desktop Client versions 63.0.5699.0 allows remote attackers to execute arbitrary code. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of URI handlers. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code under the context of the current process.
Published: 2018-09-20T20:00:00.000Z
Updated: 2024-08-05T10:01:54.606Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.