KINGSOFT-WPS-Office-LPE

JVN Advisory https://jvn.jp/en/vu/JVNVU90673830/ The following CVE number have been assigned: CVE-2022-25943 KINGSOFT WPS Office LPE WPS Office is an office suite for Microsoft Windows, macOS, Linux, iOS, Android, and HarmonyOS developed by Zhuhai-based Chinese software developer Kingsoft...

CVE-2022-25943

CVE-2022-24934 Vulnerability Overview When installing WPS Office, the service program wpscloudsvr is installed with administrator privileges. This service is configured for manual start, but the access control list ACL attributes of the folder where the service program resides are misconfigured...

Exploit for Incorrect Default Permissions in Kingsoft Wps_Office

CVE-2022-24934 Vulnerability Overview When installing WPS...

CVE-2018-6400: Undefined Security Weakness

Kingsoft WPS Office Free 10.2.0.5978 allows local users to gain privileges or cause a denial of service by impersonating all the pipes through a use of \.\pipe\WPSCloudSvr\WpsCloudSvr -- an "insecurely created named pipe." Ensures full access to Everyone users group...