The web browser plugin for Ubisoft Uplay PC before 2.0.4 allows remote attackers to execute arbitrary programs via the -orbit_exe_path command line argument. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 80.2%.
Command Injection
Uplay Pc
NVD
Exploit-DB
CVSS 2.0
10.0
EPSS
80.2%
Threat
5.9