Skip to content
OpenAdvisories

Vendor

Kingsoft

5 known vulnerabilities.

Products

WPS Office 5
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.5
    CVE-2025-2516

    Use of a weak cryptographic key in the signature verification process in WPS Office

    The use of a weak cryptographic key pair in the signature verification process in WPS Office (Kingsoft) on Windows allows an attacker who successfully recovered the private key to sign components. As older versions of WPS Office did not validate the update se…

    Kingsoft WPS Office
  • Critical 9.3
    CVE-2024-11957

    Arbitrary Code Execution in WPS Office

    Improper verification of the digital signature in ksojscore.dll in Kingsoft WPS Office in versions equal or less than 12.1.0.18276 on Windows allows an attacker to load an arbitrary Windows library. The patch released in version 12.2.0.16909 to mitigate CVE-2…

    Kingsoft WPS Office
  • Critical 9.3
    CVE-2024-7263

    Arbitrary Code Execution in WPS Office

    Improper path validation in promecefpluginhost.exe in Kingsoft WPS Office version ranging from 12.2.0.13110 to 12.2.0.17115 (exclusive) on Windows allows an attacker to load an arbitrary Windows library. The patch released in version 12.1.0.17119 to mitigate …

    Kingsoft WPS Office
  • Critical 9.3
    CVE-2024-7262 Exploited

    Arbitrary Code Execution in WPS Office

    Improper path validation in promecefpluginhost.exe in Kingsoft WPS Office version ranging from 12.2.0.13110 to 12.2.0.16412 (exclusive) on Windows allows an attacker to load an arbitrary Windows library. The vulnerability was found weaponized as a single-clic…

    Kingsoft WPS Office
    KEV Sep 3, 2024