| Title | Wondershare Dr.Fone 13.7.17.628 Incorrect Default Permissions |
|---|
| Description | The file ACL grants Everyone:(F) on WsidService.exe. Any local user can write, replace, or delete the executable. The service runs as LocalSystem. A writable privileged service binary allows a local user to place a malicious executable which will run with SYSTEM privileges when the service starts or the system reboots. This is a local privilege escalation via insecure file permissions. |
|---|
| Source | ⚠️ https://github.com/lakshayyverma/CVE-Discovery/blob/main/Wondershare.md |
|---|
| User | lakshay12311 (UID 91298) |
|---|
| Submission | 10/28/2025 07:51 (11 months ago) |
|---|
| Moderation | 11/14/2025 09:08 (17 days later) |
|---|
| Status | Duplicate |
|---|
| VulDB entry | 227531 [Wondershare Dr.Fone 12.9.6 permission] |
|---|
| Points | 0 |
|---|