<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: wondershare</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2019-25344: Wondershare MobileGo 8.5.0 contains an insecure file permissions vulnerability that allows local users to modi</title><link>https://patchthecve.com/cve/CVE-2019-25344.html</link><guid>https://patchthecve.com/cve/CVE-2019-25344.html</guid><pubDate>Wed, 17 Jun 2026 02:32:07 +0000</pubDate><description>HIGH 7.8: Wondershare MobileGo 8.5.0 contains an insecure file permissions vulnerability that allows local users to modify executable files in the application directory. Attackers can replace the original MobileGo.exe with a malicious executable to create a new user account and add it to the Administrators gr</description></item><item><title>CVE-2022-50903: Wondershare MobileTrans 3.5.9 contains an unquoted service path vulnerability in the ElevationService that all</title><link>https://patchthecve.com/cve/CVE-2022-50903.html</link><guid>https://patchthecve.com/cve/CVE-2022-50903.html</guid><pubDate>Wed, 17 Jun 2026 05:24:23 +0000</pubDate><description>HIGH 8.4: Wondershare MobileTrans 3.5.9 contains an unquoted service path vulnerability in the ElevationService that allows local users to potentially execute code with elevated system privileges. Attackers can exploit the unquoted path by placing malicious executables in specific filesystem locations that wi</description></item><item><title>CVE-2022-50901: Wondershare Dr.Fone 11.4.9 contains an unquoted service path vulnerability in the DFWSIDService that allows lo</title><link>https://patchthecve.com/cve/CVE-2022-50901.html</link><guid>https://patchthecve.com/cve/CVE-2022-50901.html</guid><pubDate>Wed, 17 Jun 2026 05:24:23 +0000</pubDate><description>HIGH 8.4: Wondershare Dr.Fone 11.4.9 contains an unquoted service path vulnerability in the DFWSIDService that allows local users to potentially execute arbitrary code. Attackers can exploit the unquoted path in C:\Program Files (x86)\Wondershare\Wondershare Dr.Fone\ to inject malicious executables that would</description></item><item><title>CVE-2022-50900: Wondershare Dr.Fone 12.0.18 contains an unquoted service path vulnerability that allows local users to execute</title><link>https://patchthecve.com/cve/CVE-2022-50900.html</link><guid>https://patchthecve.com/cve/CVE-2022-50900.html</guid><pubDate>Wed, 17 Jun 2026 05:24:22 +0000</pubDate><description>HIGH 8.4: Wondershare Dr.Fone 12.0.18 contains an unquoted service path vulnerability that allows local users to execute arbitrary code with elevated system privileges. Attackers can exploit the misconfigured service path to insert malicious code that will be executed with LocalSystem permissions during servi</description></item><item><title>CVE-2025-5180: A vulnerability, which was classified as critical, has been found in Wondershare Filmora 14.5.16</title><link>https://patchthecve.com/cve/CVE-2025-5180.html</link><guid>https://patchthecve.com/cve/CVE-2025-5180.html</guid><pubDate>Wed, 17 Jun 2026 09:47:24 +0000</pubDate><description>HIGH 7.0: A vulnerability, which was classified as critical, has been found in Wondershare Filmora 14.5.16. Affected by this issue is some unknown functionality in the library CRYPTBASE.dll of the file NFWCHK.exe of the component Installer. The manipulation leads to uncontrolled search path. Attacking locally</description></item><item><title>CVE-2020-23438: Wondershare filmora 9.2.11 is affected by Trojan Dll hijacking leading to privilege escalation.</title><link>https://patchthecve.com/cve/CVE-2020-23438.html</link><guid>https://patchthecve.com/cve/CVE-2020-23438.html</guid><pubDate>Wed, 17 Jun 2026 03:04:44 +0000</pubDate><description>HIGH 7.8: Wondershare filmora 9.2.11 is affected by Trojan Dll hijacking leading to privilege escalation.</description></item><item><title>CVE-2024-26574: Insecure Permissions vulnerability in Wondershare Filmora v.13.0.51 allows a local attacker to execute arbitra</title><link>https://patchthecve.com/cve/CVE-2024-26574.html</link><guid>https://patchthecve.com/cve/CVE-2024-26574.html</guid><pubDate>Wed, 17 Jun 2026 07:17:48 +0000</pubDate><description>HIGH 7.8: Insecure Permissions vulnerability in Wondershare Filmora v.13.0.51 allows a local attacker to execute arbitrary code via a crafted script to the WSNativePushService.exe</description></item></channel></rss>