High severity · published Aug 15, 2024
CVE-2024-7262
Arbitrary Code Execution in WPS Office
In wildKEV
7.8
CVSS
3.1%
EPSS
Yes
On KEV
Description
Improper path validation in promecefpluginhost.exe in Kingsoft WPS Office version ranging from 12.2.0.13110 to 12.2.0.16412 (exclusive) on Windows allows an attacker to load an arbitrary Windows library.
The vulnerability was found weaponized as a single-click exploit in the form of a deceptive spreadsheet document
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)3.1% · higher than 88% of CVEs
Exploited in the wildYes
CISA KEVListed Sep 3, 2024
Federal remediation dueSep 24, 2024
Ransomware campaign useNot known
Affected products
Which versions
WO
WPS Office · Kingsoft
12.2.0.13110 before 12.2.0.16412 · source: vendor, NVD, CISA, KEV
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-7262
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-7262
CISA KEV catalogue
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
www.wps.com
https://www.wps.com/whatsnew/pc/20240422/
More from WPS Office
9.3
CVE-2024-11957
Arbitrary Code Execution in WPS Office
8.1
CVE-2023-32548
OS command injection vulnerability exists in WPS Office version 10.8.0.6186
7.8
CVE-2024-7263
Arbitrary Code Execution in WPS Office
7.8
CVE-2024-35205
The WPS Office (aka cn.wps.moffice_eng) application before 17.0.0 for Android fails to properly sanitize file names before processing them through external application…
7.8
CVE-2023-31275
An uninitialized pointer use vulnerability exists in the functionality of WPS Office 11.2.0.11537 that handles Data elements in an Excel file