CVE-2022-25969
High
Description
The installer of WPS Office Version 10.8.0.6186 insecurely load VERSION.DLL (or some other DLLs), allowing an attacker to execute arbitrary code with the privilege of the user invoking the installer.
SeverityHigh
CVSS7.8
Exploit probability—
ProductKingsoft Wps Office
PublishedMar 17, 2022
First seenMar 17, 2022
Weakness typeCWE-427CWE-427
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| kingsoft wps_office | 10.8.0.6186 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.