CVE-2021-44595: Wondershare Dr.fone

High severity, CVSS 8.8. EPSS: 21.1% chance of exploitation in the next 30 days.

Wondershare Dr. Fone Latest version as of 2021-12-06 is vulnerable to Incorrect Access Control. A normal user can send manually crafted packets to the ElevationService.exe and execute arbitrary code without any validation with SYSTEM privileges.

Affected products

• Wondershare Dr.fone: version 2021-12-06 only

Published 2022-04-29. Last modified 2026-07-09.