Vulnerabilities in KINGSOFT JAPAN, INC.
5 resultsVexday analysis
A Kingsoft Japan possui 5 vulnerabilidades registradas, nenhuma sob exploração ativa conhecida (KEV) ou com severidade crítica. A fraqueza dominante identificada é CWE-427 (Validação inadequada de entrada), representando risco de execução não autorizada. Não há divulgações recentes (últimos 90 dias), indicando que o panorama de risco atual é estável, sem pressão imediata de patches.
CVE-2023-32548HIGHOS command injection vulnerability exists in WPS Office version 10.8.0.6186. If a remote attacker who can conduct a man-in-the-middle attackEPSS 1.1%CVE-2022-26081—The installer of WPS Office Version 10.8.0.5745 insecurely load shcore.dll, allowing an attacker to execute arbitrary code with the privilegEPSS 0.8%CVE-2022-25969—The installer of WPS Office Version 10.8.0.6186 insecurely load VERSION.DLL (or some other DLLs), allowing an attacker to execute arbitrary EPSS 0.8%CVE-2022-25949—The kernel mode driver kwatch3 of KINGSOFT Internet Security 9 Plus Version 2010.06.23.247 fails to properly handle crafted inputs, leading EPSS 0.8%CVE-2022-26511—WPS Presentation 11.8.0.5745 insecurely load d3dx9_41.dll when opening .pps files('current directory type' DLL loading).EPSS 0.6%