CVE-2024-7262

UNKNOWNKnown Exploited

CISA Known Exploited Vulnerability

While CISA cannot confirm the effectiveness of patches at this time, it is recommended that mitigations be applied per vendor instructions if available. If these instructions cannot be located or if mitigations are unavailable, discontinue the use of the product.; https://nvd.nist.gov/vuln/detail/CVE-2024-7262

Remediation deadline: September 24, 2024

Description

Kingsoft WPS Office contains a path traversal vulnerability in promecefpluginhost.exe on Windows that allows an attacker to load an arbitrary Windows library.

Timeline

Published:September 3rd, 2024 12:00 AM

Last modified:September 3rd, 2024 12:00 AM

Added to KEV:September 3rd, 2024

CVSS Scoring

No CVSS v3 score available

Affected Software

From NVD CPE configuration data

Vendors

Kingsoft

Products

WPS Office

Weaknesses (CWE)

CWE-22

References & Reports

Advisories, patches, and third-party reports

No references available.

Source: CISA KEV + NVD · Data may lag official sources by up to one minute