Vulnerabilities > Kingsoft > WPS Office > 10.8.0.5745
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2022-03-17 | CVE-2022-26081 | Uncontrolled Search Path Element vulnerability in Kingsoft WPS Office 10.8.0.5745 The installer of WPS Office Version 10.8.0.5745 insecurely load shcore.dll, allowing an attacker to execute arbitrary code with the privilege of the user invoking the installer. | 7.8 |
2020-09-13 | CVE-2020-25291 | Out-of-bounds Write vulnerability in Kingsoft WPS Office GdiDrawHoriLineIAlt in Kingsoft WPS Office before 11.2.0.9403 allows remote heap corruption via a crafted PLTE chunk in PNG data within a Word document. | 7.8 |