CVE-2021-44595

HIGH 8.8CVE-2021-44595 · Published 29/04/2022 · updated 09/07/2026

Package	Affected versions	Patched versions
dr.fone wondershare	`= 2021-12-06`	No fix yet

Description

Wondershare Dr. Fone Latest version as of 2021-12-06 is vulnerable to Incorrect Access Control. A normal user can send manually crafted packets to the ElevationService.exe and execute arbitrary code without any validation with SYSTEM privileges.

References

packetstormsecurity.com/files/167036/Wondershare-Dr.Fone-12.0.7-Privilege-Escalation.html · Exploit
medium.com/@tomerp_77017/wondershell-a82372914f26
medium.com/%40tomerp_77017/wondershell-a82372914f26

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free