PT-2026-2376 · Wondershare · Wondershare Dr.Fone

Mohamed Alzhrani · Published 2026-01-13 · Updated 2026-01-15 · CVE-2022-50900

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Wondershare Dr.Fone version 12.0.18

Description Wondershare Dr.Fone version 12.0.18 contains an unquoted service path issue. This allows local users to execute arbitrary code with elevated system privileges. The misconfigured service path can be exploited to insert malicious code that will be executed with LocalSystem permissions during service startup.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2022-50900

Affected Products

Wondershare Dr.Fone

References · 6

• 🔥 https://exploit-db.com/exploits/50813 · Exploit
• https://osv.dev/vulnerability/CVE-2022-50900 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50900 · Security Note
• https://wondershare.com · Note
• https://vulncheck.com/advisories/wondershare-drfone-wondershare-installassist-unquoted-service-path · Note
• https://twitter.com/CVEnew/status/2011759631559774216 · Twitter Post