Vulnerabilities > Kingsoft > WPS Office > 10.8.0.5745

DATE CVE VULNERABILITY TITLE RISK
2022-03-17 CVE-2022-26081 Uncontrolled Search Path Element vulnerability in Kingsoft WPS Office 10.8.0.5745
The installer of WPS Office Version 10.8.0.5745 insecurely load shcore.dll, allowing an attacker to execute arbitrary code with the privilege of the user invoking the installer.
local
low complexity
kingsoft CWE-427
7.8
2020-09-13 CVE-2020-25291 Out-of-bounds Write vulnerability in Kingsoft WPS Office
GdiDrawHoriLineIAlt in Kingsoft WPS Office before 11.2.0.9403 allows remote heap corruption via a crafted PLTE chunk in PNG data within a Word document.
local
low complexity
kingsoft CWE-787
7.8