EIP-2026-118159

This is a writeup describing an unquoted service path privilege escalation vulnerability in Wondershare PDFelement. The vulnerability allows a local attacker to escalate privileges by placing a malicious executable in the service path, which gets executed upon service restart or system reboot.