CVE-2018-6400

CVE-2018-6400 affects Kingsoft WPS Office Free 10.2.0.5978. The vulnerability arises from an insecurely created named pipe, \.\pipe\WPSCloudSvr\WpsCloudSvr, which can be impersonated to obtain full access via a NULL DACL. This enables local privilege escalation or denial of service by a low-privi...