What’s Vulnerable › Vulnerabilities

CVE-2022-25969

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-03-17 · updated 2026-06-17
• Weakness: CWE-427

Description

The installer of WPS Office Version 10.8.0.6186 insecurely load VERSION.DLL (or some other DLLs), allowing an attacker to execute arbitrary code with the privilege of the user invoking the installer.

Affected products

• Kingsoft WPS Office: 10.8.0.6186

References

• https://jvn.jp/en/jp/JVN21234459/
• https://support.kingsoft.jp/support-info/weakness.html
• https://jvn.jp/en/jp/JVN21234459/
• https://support.kingsoft.jp/support-info/weakness.html

Get alerted when CVE-2022-25969 or the next vulnerability affects your stack