HIGH🇵🇱 Wersja polska

CVE-2022-25969

CVSS 7.8v3.1pub. 2022-03-17upd. 2024-11-21

The installer of WPS Office Version 10.8.0.6186 insecurely load VERSION.DLL (or some other DLLs), allowing an attacker to execute arbitrary code with the privilege of the user invoking the installer.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

  • Kingsoft Wps Office

    APP
    Kingsoft
    10.8.0.6186
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCE
CWE
References

Related vulnerabilities

CVE-2024-7262CRITICAL9.3⚠ KEVPL ✓same product

Path Traversal w Kingsoft WPS Office — ładowanie dowolnej biblioteki Windows

CVE-2024-7263CRITICAL9.3PL ✓same product

Path traversal w Kingsoft WPS Office umożliwia ładowanie dowolnych bibliotek Windows

CVE-2023-31275HIGH8.8same product

An uninitialized pointer use vulnerability exists in the functionality of WPS Office 11.2.0.11537 that handles...

CVE-2023-32548HIGH8.1same product

OS command injection vulnerability exists in WPS Office version 10.8.0.6186. If a remote attacker who can cond...

CVE-2022-26081HIGH7.8same product

The installer of WPS Office Version 10.8.0.5745 insecurely load shcore.dll, allowing an attacker to execute ar...