CVE-2025-0834 Wondershare Dr.Fone Privilege Scalation Vulnerability
An attacker can escalate privileges to SYSTEM by replacing a specific executable file that is automatically run by the application.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-0834?
CVE-2025-0834 is a high-severity vulnerability in Wondershare Dr.Fone, published on 30 Jan 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Privilege escalation vulnerability has been found in Wondershare Dr.Fone version 13.5.21. This vulnerability could allow an attacker to escalate privileges by replacing the binary ‘C:\ProgramData\Wondershare\wsServices\ElevationService.exe’ with a malicious binary. This binary will be executed by SYSTEM automatically.
Weakness: CWE-269
Which versions are affected by CVE-2025-0834?
How do I fix CVE-2025-0834?
No fix has been published for CVE-2025-0834 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-0834 being exploited?
There is no known exploitation of CVE-2025-0834 in the wild and no public exploit code.
Sources
Also known as GHSA-rgvg-2qj5-mw9w.