CVE-2024-7262: Kingsoft WPS Office Path Traversal Vulnerability
Kingsoft WPS Office contains a path traversal vulnerability in promecefpluginhost.exe on Windows that allows an attacker to load an arbitrary Windows library. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
· high severity · unattributed attribution
Evidence and provenance
- Original source
- CISA KEV report ↗
- Published
- 2024-09-03T00:00:00Z
- Confidence basis
- No actor match
- Record ID
70f3b9f7ab6e2b70053d
Vulnerabilities
CVE-2024-7262
Use and citation
Verify the original report before making operational decisions. Cite this permanent page together with the original source, publication date, confidence level, and review status.