coldbraid

CVE-2024-7262 Kingsoft WPS Office

Kingsoft WPS Office contains a path traversal vulnerability in promecefpluginhost.exe on Windows that allows an attacker to load an arbitrary Windows library.

CVSS
not scored

CWE-22

On CISA’s exploited list

Kingsoft WPS Office Path Traversal Vulnerability

Added
2024-09-03
Federal patch deadline
2024-09-24
Ransomware use
not known