Uplay Pc

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2012-4177 Aug 07, 20:55 CRITICAL POC THREAT Emergency

The web browser plugin for Ubisoft Uplay PC before 2.0.4 allows remote attackers to execute arbitrary programs via the -orbit_exe_path command line argument. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 80.2%.

Command Injection Uplay Pc Ubi

NVD Exploit-DB

CVSS 2.0

10.0

EPSS

80.2%

Threat

5.9

CVE-2014-5453 Aug 25, 16:55 HIGH POC This Week

Ubisoft Uplay PC before 4.6.1.3217 use weak permissions (Everyone: Full Control) for the program installation directory (%PROGRAMFILES%\Ubisoft Game Launcher), which allows local users to gain. Rated high severity (CVSS 7.2), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Privilege Escalation Uplay Pc Ubi

NVD Exploit-DB

CVSS 2.0

7.2

EPSS

1.1%

CVE-2012-4177

EPSS 80% 5.9 CVSS 10.0

CRITICAL POC THREAT Emergency

Command Injection Uplay Pc Ubi

NVD Exploit-DB

CVE-2014-5453

EPSS 1% CVSS 7.2

HIGH POC This Week

Privilege Escalation Uplay Pc Ubi

NVD Exploit-DB