CVE-2020-37254: Wondershare Pdfelement

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Wondershare PDFelement 5.2.9 contains a privilege escalation vulnerability due to an unquoted service path in the WsAppService Windows service. Local attackers can place a malicious executable in the service path and execute code with LocalSystem privileges upon service restart or system reboot.

Affected products

• Wondershare Pdfelement: version 5.2.9 only

Published 2026-06-19. Last modified 2026-09-29.