CVE-2021-40399CWE-416

An exploitable use-after-free vulnerability exists in WPS Spreadsheets ( ET ) as part of WPS Office, version 11.2.0.10351

High · published May 12, 2022

CVSS v3.0
8.8
EPSS
1%
Percentile
72.2
In the wild
Unconfirmed
What it is

An exploitable use-after-free vulnerability exists in WPS Spreadsheets ( ET ) as part of WPS Office, version 11.2.0.10351. A specially-crafted XLS file can cause a use-after-free condition, resulting in remote code execution. An attacker needs to provide a malformed file to the victim to trigger the vulnerability.

The record
Technical detail
CVSS v3.0
8.8 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01395 · 72.2th percentile
Weakness
CWE-416 · Use After Free
Published
2022-05-12T17:01Z
EPSS history
Timeline
  • 12 MAY 17:01Z
    An exploitable use-after-free vulnerability exists in WPS Spreadsheets ( ET ) as part of WPS Office, version 11.2.0.10351
    cvelistv5