CVE-2022-25969CWE-427

The installer of WPS Office Version 10.8.0.6186 insecurely load VERSION.DLL (or some other DLLs), allowing an attacker to execute arbitrary code with the…

published March 17, 2022

CVSS
—
EPSS
1%
Percentile
57.0
In the wild
Unconfirmed
What it is

The installer of WPS Office Version 10.8.0.6186 insecurely load VERSION.DLL (or some other DLLs), allowing an attacker to execute arbitrary code with the privilege of the user invoking the installer.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00825 · 57.0th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2022-03-17T17:15Z
EPSS history
Timeline
  • 17 MAR 17:15Z
    The installer of WPS Office Version 10.8.0.6186 insecurely load VERSION.DLL (or some other DLLs), allowing an attacker to execute arbitrary code with the…
    cvelistv5