CVE-2022-50900

CVE-2022-50900 is an unquoted service path vulnerability in Wondershare Dr.Fone version 12.0.18. This flaw allows a local attacker to execute arbitrary code with elevated LocalSystem privileges by inserting malicious code into the misconfigured service path. The vulnerability carries a high CVSS score of 7.8, indicating significant impact (confidentiality, integrity, availability) with low attack complexity and no user interaction required. While there is no evidence of active exploitation, nor publicly available exploit modules like Metasploit or Nuclei, the vulnerability has garnered notable community discussion.