CVE-2022-26081

State: Published
Severity: Not scored
Published: Mar 17, 2022
Updated: Aug 3, 2024
Reserved: Mar 14, 2022

Description

The installer of WPS Office Version 10.8.0.5745 insecurely load shcore.dll, allowing an attacker to execute arbitrary code with the privilege of the user invoking the installer.

Scores

The record has no CVSS score.

Weaknesses

CWE-427 insecurely loading Dynamic Link Libraries

Affected Products

Product	Versions
The installer of WPS OfficeKINGSOFT JAPAN, INC.	Reported for Version 10.8.0.5745Affected

References

https://support.kingsoft.jp/support-info/weakness.html
JVN#21234459: Multiple vulnerabilities in KINGSOFT 'WPS Office' and 'KINGSOFT Internet Security'third-party-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.