Firetruck

CVE-2024-7262

KEV
Updated Oct 21, 2025 · PUBLISHED
View KEV entry →

Description

Kingsoft WPS Office contains a path traversal vulnerability in promecefpluginhost.exe on Windows that allows an attacker to load an arbitrary Windows library.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
wps_officekingsoft / wps_office>= 12.2.0.13110, < 12.2.0.13489affected
WPS OfficeKingsoft / WPS Office>= 12.2.0.13110, < 12.2.0.16412affected