CNNVD-202601-1939 Information
Jan 13, 2026
cve
CNNVD ID
CNNVD-202601-1939
Related CVE
- CNNVD Published: 2026-01-13
Description (Chinese)
Wondershare Dr.Fone是中国万兴（Wondershare）公司的一个手机一站式解决方案。 Wondershare Dr.Fone 12.0.18版本存在代码问题漏洞，该漏洞源于服务路径未加引号，可能导致本地用户执行任意代码并提升系统权限。
Description (English)
Wondershare Dr. Fone is a one-stop phone solution for Wondershare in China. There is a code gap in Wondershare Dr. Fone 12.0.18, which stems from the absence of quotation marks on the service path, which may result in local users enforcing any code and increasing system privileges.
Hazard Level
Medium
Vulnerability Type
代码问题
Affected Vendor
万兴
Published
2026-01-13
Last Modified
2026-02-24
References
https://www.exploit-db.com/exploits/50813 https://www.vulncheck.com/advisories/wondershare-drfone-wondershare-installassist-unquoted-service-path https://www.wondershare.com/
Share on: