PatchTheCVEdr.fone vulnerabilities and fixes
Recent CVEs affecting dr.fone, with upgrade or downgrade steps. 2 tracked.
Also searched as: dr fone, drfone.
dr.fone has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2026-01-13. Highest priority: CVE-2022-50901 (score 39/100).
- CVE-2022-50901 HIGH 8.4 DOWNGRADE Wondershare Dr.Fone 11.4.9 contains an unquoted service path vulnerability in the DFWSIDService that allows lo
- CVE-2022-50900 HIGH 8.4 DOWNGRADE Wondershare Dr.Fone 12.0.18 contains an unquoted service path vulnerability that allows local users to execute
FAQ
How do I fix dr.fone vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is dr.fone being exploited right now?
None of the tracked dr.fone CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which dr.fone CVE should I patch first?
CVE-2022-50901 currently ranks highest (39/100): Wondershare Dr.Fone 11.4.9 contains an unquoted service path vulnerability in the DFWSIDService that allows lo.