CVE-2019-14935

3CX Phone 15 on Windows has insecure permissions on the "%PROGRAMDATA%CXPhone for WindowsPhoneApp" installation directory, allowing Full Control access for Everyone, and leading to privilege escalation because of a StartUp link.

Source: CVE-2019-14935