PT-2026-50919

CVE-2020-37254

·

Published

2026-06-19

·

Updated

2026-09-29

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Wondershare PDFelement version 5.2.9
Description A privilege escalation issue exists due to an unquoted service path in the WsAppService Windows service. Local attackers can exploit this by placing a malicious executable in the service path, allowing for code execution with LocalSystem privileges when the service restarts or the system reboots.
Recommendations Update Wondershare PDFelement to a version newer than 5.2.9.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾