CVE-2022-25943

The CVE-2022-25943 issue affects WPS Office for Windows prior to v11.2.0.10258. The installer fails to configure ACLs correctly for the installation directory of the service program, enabling a local-privilege escalation path as described in multiple sources. Affected software is the WPS Office W...

CVE-2020-25291

CVE-2020-25291 affects Kingsoft WPS Office prior to 11.2.0.9403. A crafted PNG PLTE chunk in a Word document can trigger a remote heap corruption via GdiDrawHoriLineIAlt, related to QBrush::setMatrix in Qt 4.x. Affects WPS Office's handling of embedded graphics in Word documents; root cause is th...