VULNERABILITY INTELLIGENCE

CVE-2023-31747

CVSS score7.8 HIGH

EPSS probability1.09%

CISA KEVNot currently listed

Published2023-05-23

Last modified2026-07-09

CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

Wondershare Filmora 12 (Build 12.2.1.2088) was discovered to contain an unquoted service path vulnerability via the component NativePushService. This vulnerability allows attackers to launch processes with elevated privileges.

Weakness classification

nvd@nist.gov: CWE-428
134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-428

Primary references

cve@mitre.org — Exploit, Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory, VDB Entry