High severity · published Aug 15, 2024
CVE-2024-7263
Arbitrary Code Execution in WPS Office
7.8
CVSS
0.4%
EPSS
No
On KEV
Description
Improper path validation in promecefpluginhost.exe in Kingsoft WPS Office version ranging from 12.2.0.13110 to 12.2.0.17115 (exclusive) on Windows allows an attacker to load an arbitrary Windows library.
The patch released in version 12.1.0.17119 to mitigate CVE-2024-7262 was not restrictive enough. Another parameter was not properly sanitized which leads to the execution of an arbitrary Windows library.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 33% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WO
WPS Office · Kingsoft
12.2.0.13110 before 12.2.0.17115 · source: vendor, NVD, CISA
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-7263
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-7263
Vendor Advisory
https://www.wps.com/whatsnew/pc/20240422/
More from WPS Office
7.8
CVE-2024-7262
Arbitrary Code Execution in WPS Office
9.3
CVE-2024-11957
Arbitrary Code Execution in WPS Office
8.1
CVE-2023-32548
OS command injection vulnerability exists in WPS Office version 10.8.0.6186
7.8
CVE-2024-35205
The WPS Office (aka cn.wps.moffice_eng) application before 17.0.0 for Android fails to properly sanitize file names before processing them through external application…
7.8
CVE-2023-31275
An uninitialized pointer use vulnerability exists in the functionality of WPS Office 11.2.0.11537 that handles Data elements in an Excel file