PT-2026-50919
CVE-2020-37254
·
Published
2026-06-19
·
Updated
2026-09-29
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Wondershare PDFelement version 5.2.9
Description
A privilege escalation issue exists due to an unquoted service path in the WsAppService Windows service. Local attackers can exploit this by placing a malicious executable in the service path, allowing for code execution with LocalSystem privileges when the service restarts or the system reboots.
Recommendations
Update Wondershare PDFelement to a version newer than 5.2.9.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾