KI
Vendor
Kingsoft
31
CVEs
1
On KEV
0
New 30D
Products
WO9.3
WPS Office
Kingsoft
13 CVEs1 on KEV0 new
IS7.8
Internet Security 9 Plus
Kingsoft
2 CVEs0 on KEV0 new
KA–
Kingsoft Antivirus
Kingsoft
2 CVEs0 on KEV0 new
O2–
Office 2012
Kingsoft
2 CVEs0 on KEV0 new
AO–
Antivirus Online Update Module
Kingsoft
1 CVEs0 on KEV0 new
IS–
Internet Security
Kingsoft
1 CVEs0 on KEV0 new
JP5.5
Jinshan Pdf
Kingsoft
1 CVEs0 on KEV0 new
KD–
Kdrive
Kingsoft
1 CVEs0 on KEV0 new
PF5.3
Personal Firewall 9
Kingsoft
1 CVEs0 on KEV0 new
S2–
Spreadsheets 2012
Kingsoft
1 CVEs0 on KEV0 new
WE–
Webshield
Kingsoft
1 CVEs0 on KEV0 new
WP7.8
Wps Presentation
Kingsoft
1 CVEs0 on KEV0 new
W2–
Writer 2007
Kingsoft
1 CVEs0 on KEV0 new
W2–
Writer 2010
Kingsoft
1 CVEs0 on KEV0 new
W2–
Writer 2012
Kingsoft
1 CVEs0 on KEV0 new
XD–
Xdict
Kingsoft
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-57096 | WO Wps Office Kingsoft | 5.5 | May 14 | An issue in wps office before v.19302 allows a local attacker to obtain sensitive information via a crafted file |
| CVE-2024-11957 | WO WPS Office Kingsoft | 9.3 | Mar 4 | Arbitrary Code Execution in WPS Office |
| CVE-2024-13187 | WO WPS Office Kingsoft | 5.3 | Jan 8 | Kingsoft WPS Office TCC code injection |
| CVE-2024-7263 | WO WPS Office Kingsoft | 7.8 | Aug 15 | Arbitrary Code Execution in WPS Office |
| CVE-2024-7262 In wildKEV | WO WPS Office Kingsoft | 7.8 | Aug 15 | Arbitrary Code Execution in WPS Office |
| CVE-2024-35205 | WO Wps Office Kingsoft | 7.8 | May 13 | The WPS Office (aka cn.wps.moffice_eng) application before 17.0.0 for Android fails to properly sanitize file names before processing them through external application… |
| CVE-2023-31275 | WO Wps Office Kingsoft | 7.8 | Nov 27 | An uninitialized pointer use vulnerability exists in the functionality of WPS Office 11.2.0.11537 that handles Data elements in an Excel file |
| CVE-2023-32548 | WO Wps Office Kingsoft | 8.1 | Jun 13 | OS command injection vulnerability exists in WPS Office version 10.8.0.6186 |
| CVE-2022-26511 | WP Wps Presentation Kingsoft | 7.8 | Mar 17 | WPS Presentation 11.8.0.5745 insecurely load d3dx9_41.dll when opening .pps files('current directory type' DLL loading) |
| CVE-2022-26081 | WO Wps Office Kingsoft | 7.8 | Mar 17 | The installer of WPS Office Version 10.8.0.5745 insecurely load shcore.dll, allowing an attacker to execute arbitrary code with the privilege of the user invoking the installer |
| CVE-2022-25969 | WO Wps Office Kingsoft | 7.8 | Mar 17 | The installer of WPS Office Version 10.8.0.6186 insecurely load VERSION.DLL (or some other DLLs), allowing an attacker to execute arbitrary code with the privilege of the user… |
| CVE-2022-25949 | IS Internet Security 9 Plus Kingsoft | 7.8 | Mar 17 | The kernel mode driver kwatch3 of KINGSOFT Internet Security 9 Plus Version 2010.06.23.247 fails to properly handle crafted inputs, leading to stack-based buffer overflow |
| CVE-2022-25943 | WO Wps Office Kingsoft | 7.8 | Mar 9 | The installer of WPS Office for Windows versions prior to v11.2.0.10258 fails to configure properly the ACL for the directory where the service program is installed |
| CVE-2020-25291 | WO Wps Office Kingsoft | 7.8 | Sep 13 | GdiDrawHoriLineIAlt in Kingsoft WPS Office before 11.2.0.9403 allows remote heap corruption via a crafted PLTE chunk in PNG data within a Word document |
| CVE-2018-7546 | JP Jinshan Pdf Kingsoft | 5.5 | Jul 18 | wpsmain.dll in Kingsoft WPS Office 2016 and Jinshan PDF 10.1.0.6621 allows remote attackers to cause a denial of service via a crafted pdf file |
| CVE-2018-9151 | IS Internet Security 9 Plus Kingsoft | 5.5 | Mar 30 | A NULL pointer dereference bug in the function ObReferenceObjectByHandle in the Kingsoft Internet Security 9+ kernel driver KWatch3.sys allows local non-privileged users to crash… |
| CVE-2012-4886 | O2 Office 2012 Kingsoft | – | Mar 24 | Stack-based buffer overflow in wpsio.dll in Kingsoft WPS Office 2012 possibly 8.1.0.3238 allows remote attackers to execute arbitrary code via a long BSTR string |
| CVE-2013-5999 | KD Kdrive Kingsoft | – | Nov 22 | Kingsoft KDrive Personal before 1.21.0.1880 on Windows does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… |
| CVE-2013-3934 | W2 Writer 2012 Kingsoft | – | Sep 10 | Stack-based buffer overflow in Kingsoft Writer 2012 8.1.0.3030, as used in Kingsoft Office 2013 before 9.1.0.4256, allows remote attackers to execute arbitrary code via a long… |
| CVE-2013-0723 | S2 Spreadsheets 2012 Kingsoft | – | Jul 29 | Multiple heap-based buffer overflows in etxrw.dll in Kingsoft Spreadsheets 2012 8.1.0.3030 allow remote attackers to cause a denial of service (memory corruption and crash) or… |
| CVE-2013-0710 | W2 Writer 2010 Kingsoft | – | Mar 5 | Buffer overflow in Kingsoft Writer 2007 and 2010 before 2724 allows remote attackers to execute arbitrary code via a crafted RTF document |
| CVE-2010-5164 | PF Personal Firewall 9 Kingsoft | 5.3 | Aug 25 | Race condition in KingSoft Personal Firewall 9 Plus 2009.05.07.70 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would… |
| CVE-2012-0321 | IS Internet Security Kingsoft | – | Mar 2 | Unspecified vulnerability in the device driver in Kingsoft Internet Security 2011 allows local users to cause a denial of service via a crafted application |
| CVE-2011-0515 | KA Kingsoft Antivirus Kingsoft | – | Jan 20 | KisKrnl.sys 2011.1.13.89 and earlier in Kingsoft AntiVirus 2011 SP5.2 allows local users to cause a denial of service (crash) via a crafted request that is not properly handled by… |
| CVE-2010-3396 | KA Kingsoft Antivirus Kingsoft | – | Sep 15 | Buffer overflow in kavfm.sys in Kingsoft Antivirus 2010.04.26.648 and earlier allows local users to execute arbitrary code via a long argument to IOCTL 0x80030004 |
| CVE-2010-2031 | WE Webshield Kingsoft | – | May 24 | KAVSafe.sys 2010.4.14.609 and earlier, as used in Kingsoft Webshield 3.5.1.2 and earlier, allows local users to overwrite arbitrary kernel memory via a crafted request to IOCTL… |
| CVE-2008-1307 | AO Antivirus Online Update Module Kingsoft | – | Mar 12 | Heap-based buffer overflow in the KUpdateObj2 Class ActiveX control in UpdateOcx2.dll in Beijing KingSoft Antivirus Online Update Module 2007.12.29.29 allows remote attackers to… |
| CVE-2004-1494 | XD Xdict Kingsoft | – | Dec 31 | Buffer overflow in the Screen Fetch option in XDICT 2002 through 2005 allows remote attackers to cause a denial of service ( CPU consumption or application exit) and possibly… |