High severity · published Mar 17, 2022
CVE-2022-26081
The installer of WPS Office Version 10.8.0.5745 insecurely load shcore.dll, allowing an attacker to execute arbitrary code with the privilege of the user invoking the installer
7.8
CVSS
0.8%
EPSS
No
On KEV
Description
The installer of WPS Office Version 10.8.0.5745 insecurely load shcore.dll, allowing an attacker to execute arbitrary code with the privilege of the user invoking the installer.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 57% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TI
The installer of WPS Office · KINGSOFT JAPAN, INC.
Reported for Version 10.8.0.5745 · source: vendor
WO
Wps Office · Kingsoft
10.8.0.5745 · source: NVD
Affected product
TI
The installer of WPS Office
KINGSOFT JAPAN, INC.
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-26081
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-26081
Third Party Advisory
https://jvn.jp/en/jp/JVN21234459/
Vendor Advisory
https://support.kingsoft.jp/support-info/weakness.html
More from The installer of WPS Office
7.8
CVE-2022-25969
The installer of WPS Office Version 10.8.0.6186 insecurely load VERSION.DLL (or some other DLLs), allowing an attacker to execute arbitrary code with the privilege of the user…