216.73.216.6

CVE-2019-25266

· Published 06/02/2026 17:16 · Modified 06/02/2026 21:57

Labels: CVE-2019-25266 2026-02-06CVE-2019-25266CWE-428[email protected]

Essential information

Published
06/02/2026 17:16
Modified
06/02/2026 21:57
Author
—
Creator
—
CVSS
8.5 HIGH (v3) 8.5 HIGH (v4.0)
CISA KEV
No
CWE
—
CVSS vector
—

CVSS metrics

Description

Wondershare Application Framework Service 2.4.3.231 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevated privileges. Attackers can exploit the unquoted service path by placing malicious executables in specific directory locations to hijack the service's execution context.

NVD status

Status
Awaiting Analysis — CVE has been recently published to the CVE List and has been received by the NVD.
Source
[email protected]
NVD
View on NVD

Affected products (CPE)

ProductCPE
wondershare / application framework service cpe:2.3:a:wondershare:application_framework_service:2.4.3.231:*:*:*:*:*:*:*
wondershare / application framework service cpe:2.3:a:wondershare:application_framework_service:*:*:*:*:*:*:*:*

References