Unscored CVE-2022-26081 EUVD-2022-30649GHSA-xc4c-g546-wr9g

The installer of WPS Office Version 10.8.0.5745 insecurely load shcore.dll, allowing an attacker to execute arbitrary code with the privile…

Published Mar 17, 2022 · Updated Aug 3, 2024 · Assigned by jpcert

Vendor: KINGSOFT JAPAN Product: The installer of WPS Office

Description

The installer of WPS Office Version 10.8.0.5745 insecurely load shcore.dll, allowing an attacker to execute arbitrary code with the privilege of the user invoking the installer.

Affected products

Vendor	Product	Affected	Fixed
KINGSOFT JAPAN	The installer of WPS Office	Reported for Version 10.8.0.5745	—

References

https://support.kingsoft.jp/support-info/weakness.html
JVN#21234459: Multiple vulnerabilities in KINGSOFT 'WPS Office' and 'KINGSOFT Internet Security' third-party-advisory