Vulnerability · Published Dec 22, 2025 · Assigned by VulnCheck
CVE-2022-50690Wondershare MirrorGo 2.0.11.346 Local Privilege Escalation via Insecure File Permissions
High 8.4
In plain English
A high-severity incorrect permission assignment in Wondershare MirrorGo from Wondershare. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 3% of all known vulnerabilities).
Severity (CVSS 3.1)8.4High
Exploit odds (30 days)0.1%top 97.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Wondershare MirrorGo 2.0.11.346 contains a local privilege escalation vulnerability due to incorrect file permissions on executable files. Unprivileged local users can replace the ElevationService.exe with a malicious file to execute arbitrary code with LocalSystem privileges.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Wondershare | Wondershare MirrorGo | 2.0.11.346 |
Weakness: CWE-732 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H