Most recent entries from all

bdu:2022-01503

EUVD-2026-14751

fkie_cve-2022-25969

The installer of WPS Office Version 10.8.0.6186 insecurely load VERSION.DLL (or some other DLLs), allowing an attacker to execute arbitrary code with the privilege of the user invoking the installer.

GHSA-px53-7qp6-v8p9

The installer of WPS Office Version 10.8.0.6186 insecurely load VERSION.DLL (or some other DLLs), allowing an attacker to execute arbitrary code with the privilege of the user invoking the installer.

gsd-2022-25969

jvndb-2022-000021

"WPS Office" and "KINGSOFT Internet Security" provided by KINGSOFT JAPAN, INC. contain multiple vulnerabilities listed below. * Stack-based buffer overflow (CWE-121) - CVE-2022-25949 * Insecurely loading Dynamic Link Libraries (CWE-427) - CVE-2022-26081, CVE-2022-25969, CVE-2022-26511 These vulnerabilities are reported by the following reporters, and JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2022-26949: Satoshi Tanda CVE-2022-26081, CVE-2022-26511: Eiji James Yoshida of Security Professionals Network Inc. CVE-2022-25969: Tomohisa Hasegawa