Vulnerabilities in KINGSOFT JAPAN, INC.
5 resultsCVE-2023-32548HIGHOS command injection vulnerability exists in WPS Office version 10.8.0.6186. If a remote attacker who can conduct a man-in-the-middle attackEPSS 1.1%CVE-2022-26081—The installer of WPS Office Version 10.8.0.5745 insecurely load shcore.dll, allowing an attacker to execute arbitrary code with the privilegEPSS 0.8%CVE-2022-25969—The installer of WPS Office Version 10.8.0.6186 insecurely load VERSION.DLL (or some other DLLs), allowing an attacker to execute arbitrary EPSS 0.8%CVE-2022-25949—The kernel mode driver kwatch3 of KINGSOFT Internet Security 9 Plus Version 2010.06.23.247 fails to properly handle crafted inputs, leading EPSS 0.7%CVE-2022-26511—WPS Presentation 11.8.0.5745 insecurely load d3dx9_41.dll when opening .pps files('current directory type' DLL loading).EPSS 0.6%