Uplay Pc

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2014-5453 HIGH POC This Week

Ubisoft Uplay PC before 4.6.1.3217 use weak permissions (Everyone: Full Control) for the program installation directory (%PROGRAMFILES%\Ubisoft Game Launcher), which allows local users to gain. Rated high severity (CVSS 7.2), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Privilege Escalation Uplay Pc

NVD Exploit-DB

CVSS 2.0

7.2

EPSS

1.1%

CVE-2012-4177 CRITICAL POC THREAT Emergency

The web browser plugin for Ubisoft Uplay PC before 2.0.4 allows remote attackers to execute arbitrary programs via the -orbit_exe_path command line argument. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 80.2%.

Command Injection Uplay Pc

NVD Exploit-DB

CVSS 2.0

10.0

EPSS

80.2%

Threat

5.9

CVE-2014-5453

EPSS 1% CVSS 7.2

HIGH POC This Week

Privilege Escalation Uplay Pc

NVD Exploit-DB

CVE-2012-4177

EPSS 80% 5.9 CVSS 10.0

CRITICAL POC THREAT Emergency

Command Injection Uplay Pc

NVD Exploit-DB