Wondershare

Records37All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high33CVSS 7.0–8.9

Exploited now

Wondershare records in CISA KEV

No Wondershare vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Dr.fone 8 records HIGH Filmora 5 records HIGH Mobiletrans 3 records HIGH Repairit 3 records HIGH Anireel 1 record HIGH Creative Centerr 1 record HIGH Democreator 1 record HIGH Edraw 1 record HIGH

Records

8 records in Dr.fone · all components

TI-2023-12402 CVE-2023-27767 · GHSA-3vfp-ghf6-8g67

An issue found in Wondershare Technology Co.,Ltd Dr.Fone v.12.4.9 allows a remote…

HIGH 69

An issue found in Wondershare Technology Co.,Ltd Dr.Fone v.12.4.9 allows a remote attacker to execute arbitrary commands via the drfone_setup_full3360.exe file.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00433 Published 2023-04-04 No fix listed CWE-426

TI-2021-20164 CVE-2021-44596 · GHSA-524v-mfqh-4rrh

Wondershare LTD Dr.

MEDIUM 62

Wondershare LTD Dr. Fone as of 2021-12-06 version is affected by Remote code execution.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.22929 Published 2022-04-29 No fix listed

TI-2021-20163 CVE-2021-44595 · GHSA-h9xj-4798-57hx

Wondershare Dr.

MEDIUM 57

Wondershare Dr. Fone Latest version as of 2021-12-06 is vulnerable to Incorrect Access Control.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.21118 Published 2022-04-29 No fix listed CWE-862

TI-2023-11866 CVE-2023-27010 · GHSA-4j9m-52h7-f59q

Wondershare Dr.Fone v12.9.6 was discovered to contain weak permissions for the service…

LOW 38

Wondershare Dr.Fone v12.9.6 was discovered to contain weak permissions for the service WsDrvInst.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01016 Published 2023-03-13 No fix listed CWE-250

TI-2022-26355 CVE-2022-50901 · GHSA-ww66-fhwc-48m5

Wondershare Dr.Fone 11.4.9 - 'DFWSIDService' Unquoted Service Path

LOW 38

Wondershare Dr.Fone 11.4.9 contains an unquoted service path vulnerability in the DFWSIDService that allows local users to potentially execute arbitrary code.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00268 Published 2026-01-13 No fix listed CWE-428

TI-2022-26354 CVE-2022-50900 · GHSA-cf2j-vp4v-vp5c

Wondershare Dr.Fone 12.0.18 - 'Wondershare InstallAssist' Unquoted Service Path

LOW 38

Wondershare Dr.Fone 12.0.18 contains an unquoted service path vulnerability that allows local users to execute arbitrary code with elevated system privileges.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.0024 Published 2026-01-13 No fix listed CWE-428

TI-2023-14036 CVE-2023-29835 · GHSA-jm79-357c-vgrx

Insecure Permission vulnerability found in Wondershare Dr.Fone v.12.9.6 allows a remote…

LOW 36

Insecure Permission vulnerability found in Wondershare Dr.Fone v.12.9.6 allows a remote attacker to escalate privileges via the service permission function.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00375 Published 2023-04-26 No fix listed

TI-2020-17026 CVE-2020-27992 · GHSA-wc9q-rchp-5rxf

Dr.Fone 3.0.0 allows local users to gain privileges via a Trojan horse DriverInstall.exe…

LOW 34

Dr.Fone 3.0.0 allows local users to gain privileges via a Trojan horse DriverInstall.exe because %PROGRAMFILES(X86)%\Wondershare\dr.fone\Library\DriverInstaller has Full Control for BUILTIN\Users.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00426 Published 2020-10-31 No fix listed CWE-732

Open these records in search →

Critical	4
High	33
Medium	0
Low	0
No CVSS	0