Skip to content
OpenAdvisories
High · 8.8 CVE-2021-40399 EUVD-2021-27576GHSA-gggr-phrh-226m

An exploitable use-after-free vulnerability exists in WPS Spreadsheets ( ET ) as part of WPS Office, version 11.2.0.10351. A specially-craf…

Published May 12, 2022 · Updated Apr 15, 2025 · Assigned by talos

Description

An exploitable use-after-free vulnerability exists in WPS Spreadsheets ( ET ) as part of WPS Office, version 11.2.0.10351. A specially-crafted XLS file can cause a use-after-free condition, resulting in remote code execution. An attacker needs to provide a malformed file to the victim to trigger the vulnerability.

Affected products

VendorProductAffectedFixed
WPS WPS Office 11.2.0.10351 —

References