Dr.Fone
Vendor:
First CVE: Nov 2, 2020 · Active for 5 years
8
Total CVEs
More Total CVEs than 87% of tracked products
2.0
Avg CVEs / Year
Higher CVE frequency than 63% of tracked products
8.2
Avg CVSS
Higher Avg CVSS than 74% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Dr.Fone over time
Volume of CVEsAvg CVSS Base Score
First CVE
Nov 2, 2020
5 years ago
Most Recent CVE
Jan 13, 2026
196 days ago
CVE Severity & Scoring
Dr.Fone8 CVEs
88%
13%
All CVEs353,173 CVEs
45%
40%
11%
HighCritical
Attack Vector
Local6 (75.0%)
Network2 (25.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low8 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None7 (87.5%)
Unknown0 (0.0%)
Required1 (12.5%)
Privileges Required
Low6 (75.0%)
High0 (0.0%)
None2 (25.0%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (8 CVEs).
8 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2021-44596CRITICAL Wondershare LTD Dr. Fone as of 2021-12-06 version is affected by Remote code execution. Due to software design flaws an unauthenticated user can communicate over UDP with the "Inst | Apr 29, 2022 | 9.8 | 57 | NO | YES |
CVE-2021-44595HIGH Wondershare Dr. Fone Latest version as of 2021-12-06 is vulnerable to Incorrect Access Control. A normal user can send manually crafted packets to the ElevationService.exe and exec | Apr 29, 2022 | 8.8 | 53 | NO | YES |
CVE-2023-27010HIGH Wondershare Dr.Fone v12.9.6 was discovered to contain weak permissions for the service WsDrvInst. This vulnerability allows attackers to escalate privileges via modifying or overwr | Mar 13, 2023 | 7.8 | 34 | NO | YES |
CVE-2022-50901HIGH Wondershare Dr.Fone 11.4.9 contains an unquoted service path vulnerability in the DFWSIDService that allows local users to potentially execute arbitrary code. Attackers can exploit | Jan 13, 2026 | 7.8 | 28 | NO | NO |
CVE-2022-50900HIGH Wondershare Dr.Fone 12.0.18 contains an unquoted service path vulnerability that allows local users to execute arbitrary code with elevated system privileges. Attackers can exploit | Jan 13, 2026 | 7.8 | 28 | NO | NO |
CVE-2023-27767HIGH An issue found in Wondershare Technology Co.,Ltd Dr.Fone v.12.4.9 allows a remote attacker to execute arbitrary commands via the drfone_setup_full3360.exe file. | Apr 4, 2023 | 7.8 | 24 | NO | NO |
CVE-2020-27992HIGH Dr.Fone 3.0.0 allows local users to gain privileges via a Trojan horse DriverInstall.exe because %PROGRAMFILES(X86)%\Wondershare\dr.fone\Library\DriverInstaller has Full Control fo | Nov 2, 2020 | 7.8 | 23 | NO | NO |
CVE-2023-29835HIGH Insecure Permission vulnerability found in Wondershare Dr.Fone v.12.9.6 allows a remote attacker to escalate privileges via the service permission function. | Apr 26, 2023 | 7.8 | 20 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (8 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
3 CVEs
37.5% of CVEs· 89th percentile
Social Chatter
Signals from CVEs in this product scope (8 CVEs).
Media Mentions
Signals from CVEs in this product scope (8 CVEs).
Top CNAs Publishing CVEs For Dr.Fone
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 3.0.0 | 1 | 7.8 | 0.4% | 0 | 0 |
| 2021-12-06 | 2 | 9.3 | 22.0% | 0 | 2 |
| 12.9.6 | 2 | 7.8 | 0.7% | 0 | 1 |
| 12.4.9 | 1 | 7.8 | 0.4% | 0 | 0 |
| 12.0.18 | 1 | 7.8 | 0.2% | 0 | 0 |
| 11.4.9 | 1 | 7.8 | 0.2% | 0 | 0 |