CVE-2022-50900CWE-428

Wondershare Dr.Fone 12.0.18 - 'Wondershare InstallAssist' Unquoted Service Path

High · published January 13, 2026

CVSS v4.0
8.5
EPSS
0%
Percentile
14.3
In the wild
Unconfirmed
What it is

⚡ An unquoted service path is the weak link here, allowing local users to execute arbitrary code with LocalSystem privileges—talk about a security nightmare! 🚨 Think of it as a restaurant that has a back door unlocked and nobody checks who walks in. A crafty local user could slip in and whip up a dish with secret ingredients, potentially poisoning the whole banquet! This vulnerability could lead to an attacker executing malicious code with elevated privileges, putting sensitive data and system integrity at serious risk. Imagine an intruder having free reign over your kitchen, mixing ingredients and altering recipes without anyone noticing—absolutely devastating!

Put simply

Think of it as a restaurant that has a back door unlocked and nobody checks who walks in. A crafty local user could slip in and whip up a dish with secret ingredients, potentially poisoning the whole banquet! Wondershare Dr.Fone 12.0.18 contains an unquoted service path vulnerability that allows local users to run arbitrary code during service startup, exploiting a misconfigured path to gain LocalSystem permissions.

What to do

This vulnerability could lead to an attacker executing malicious code with elevated privileges, putting sensitive data and system integrity at serious risk. Imagine an intruder having free reign over your kitchen, mixing ingredients and altering recipes without anyone noticing—absolutely devastating! To mitigate this, ensure the service paths are properly quoted or configure them to prevent arbitrary code execution. Review the service configuration and patch to the latest version when updates are available. You've got this! With a few adjustments, you can lock down your system and keep those unwanted intruders out! 🛡️

The record
Technical detail
CVSS v4.0
8.5 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00240 · 14.3th percentile
Weakness
CWE-428 · Unquoted Search Path or Element
Published
2026-01-13T22:51Z
EPSS history
Timeline
  • 13 JAN 22:51Z
    Wondershare Dr.Fone 12.0.18 - 'Wondershare InstallAssist' Unquoted Service Path
    cvelistv5