Most recent entries from all

bdu:2022-01504

EUVD-2026-14775

fkie_cve-2022-26081

The installer of WPS Office Version 10.8.0.5745 insecurely load shcore.dll, allowing an attacker to execute arbitrary code with the privilege of the user invoking the installer.

GHSA-xc4c-g546-wr9g

The installer of WPS Office Version 10.8.0.5745 insecurely load shcore.dll, allowing an attacker to execute arbitrary code with the privilege of the user invoking the installer.

gsd-2022-26081

jvndb-2022-000021

"WPS Office" and "KINGSOFT Internet Security" provided by KINGSOFT JAPAN, INC. contain multiple vulnerabilities listed below. * Stack-based buffer overflow (CWE-121) - CVE-2022-25949 * Insecurely loading Dynamic Link Libraries (CWE-427) - CVE-2022-26081, CVE-2022-25969, CVE-2022-26511 These vulnerabilities are reported by the following reporters, and JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2022-26949: Satoshi Tanda CVE-2022-26081, CVE-2022-26511: Eiji James Yoshida of Security Professionals Network Inc. CVE-2022-25969: Tomohisa Hasegawa