CVE-2022-26081

CVE-2022-26081

Vendor Kingsoft Japan, Inc.
Product The installer of WPS Office
Weakness CWE-427
Published March 17, 2022
Last update August 3, 2024

CVSS base score

What the vulnerability does

01Description

The installer of WPS Office Version 10.8.0.5745 insecurely load shcore.dll, allowing an attacker to execute arbitrary code with the privilege of the user invoking the installer.

Key dates

02Disclosure timeline

March 17, 2022 CVE published
August 3, 2024 Record updated