5.5Mittel
kingsoft wps office
An issue in wps office before v.19302 allows a local attacker to obtain sensitive information via a crafted file.
Kingsoft Schwachstellen (CVE)
Für Kingsoft veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.
9.5Kritisch
Use of a weak cryptographic key in the signature verification process in WPS Office
Kingsoft WPS Office
The use of a weak cryptographic key pair in the signature verification process in WPS Office (Kingsoft) on Windows allows an attacker who successfully recovered the private key to sign components. As older versions of WPS Office did not validate the update s…
9.3Kritisch
Arbitrary Code Execution in WPS Office
Kingsoft WPS Office
Improper verification of the digital signature in ksojscore.dll in Kingsoft WPS Office in versions equal or less than 12.1.0.18276 on Windows allows an attacker to load an arbitrary Windows library. The patch released in version 12.2.0.16909 to mitigate CVE…
5.3Mittel
Kingsoft WPS Office TCC code injection
Kingsoft WPS Office
A vulnerability was found in Kingsoft WPS Office 6.14.0 on macOS. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component TCC Handler. The manipulation leads to code injection. It is possible to launch the…
9.3Kritisch
CVE-2024-7262
KEV
Arbitrary Code Execution in WPS Office
Kingsoft WPS Office; kingsoft wps_office
Improper path validation in promecefpluginhost.exe in Kingsoft WPS Office version ranging from 12.2.0.13110 to 12.2.0.16412 (exclusive) on Windows allows an attacker to load an arbitrary Windows library. The vulnerability was found weaponized as a single-clic…
3.1%EPSS