CVE-2022-26081 — KINGSOFT JAPAN, INC. / The installer of WPS Office

CVE-2022-26081

KINGSOFT JAPAN, INC. / The installer of WPS Office PUBLISHED

Description (CNA)

The installer of WPS Office Version 10.8.0.5745 insecurely load shcore.dll, allowing an attacker to execute arbitrary code with the privilege of the user invoking the installer.

Affected (CNA)

Vendor / product	Versions
KINGSOFT JAPAN, INC. / The installer of WPS Office	affected Reported for Version 10.8.0.5745

CWE

CWE-427

References

https://support.kingsoft.jp/support-info/weakness.html
https://jvn.jp/en/jp/JVN21234459/

ADP enrichment

CVE

No English description supplied.

https://support.kingsoft.jp/support-info/weakness.html
https://jvn.jp/en/jp/JVN21234459/