VYPR
Unrated severityNVD Advisory· Published Jan 13, 2026· Updated Mar 5, 2026

Wondershare MobileTrans 3.5.9 - 'ElevationService' Unquoted Service Path

CVE-2022-50903

Description

Wondershare MobileTrans 3.5.9 contains an unquoted service path vulnerability in the ElevationService that allows local users to potentially execute code with elevated system privileges. Attackers can exploit the unquoted path by placing malicious executables in specific filesystem locations that will be executed with LocalSystem permissions during service startup.

Affected products

2

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

3

News mentions

0

No linked articles in our index yet.