CVE-2019-14935
3CX Phone 15 on Windows has insecure permissions on the "%PROGRAMDATA%CXPhone for WindowsPhoneApp" installation directory, allowing Full Control access for Everyone, and leading to privilege escalation because of a StartUp link.
Source: CVE-2019-14935