CVE-2022-25969

CVE-2022-25969

Vendor Kingsoft Japan, Inc.

Product The installer of WPS Office

Weakness CWE-427

Published March 17, 2022

Last update August 3, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The installer of WPS Office Version 10.8.0.6186 insecurely load VERSION.DLL (or some other DLLs), allowing an attacker to execute arbitrary code with the privilege of the user invoking the installer.

Key dates

02Disclosure timeline

March 17, 2022 CVE published

August 3, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-25969 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/427.html

Related vulnerabilities

01Description

02Disclosure timeline

03References

04Related CVE