CVE-2023-31747
41Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 7.8epss 1.1%
from disclosure to weapon0 days
Published on NVDMay 23
1st PoCApr 24
exploitation probability
1.1%top 38% of all CVEs
observed exploitation
nono source reports it
3 public exploit(s)
Wondershare Filmora 12 (Build 12.2.1.2088) was discovered to contain an unquoted service path vulnerability via the component NativePushService. This vulnerability allows attackers to launch processes with elevated privileges.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · n/apublic PoCs found — 3
exploitdbwww.exploit-db.com/exploits/51483unverifiedgithubgithub.com/msd0pe-1/CVE-2023-31747★ 0cve_referencepacketstormsecurity.com/files/172464/Filmora-12-Build-1.0.0.7-Unquoted-Service-Path.htmlunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.