CVE-2023-27010: Wondershare Dr.fone

High severity, CVSS 7.8. EPSS: 1% chance of exploitation in the next 30 days.

Wondershare Dr.Fone v12.9.6 was discovered to contain weak permissions for the service WsDrvInst. This vulnerability allows attackers to escalate privileges via modifying or overwriting the executable.

Affected products

• Wondershare Dr.fone: version 12.9.6 only

Published 2023-03-13. Last modified 2026-06-17.