KINGSOFT JAPAN vulnerabilities
We track 4 vulnerabilities in KINGSOFT JAPAN products across 3 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on June 13, 2023.
Latest KINGSOFT JAPAN vulnerabilities
- 8.1 High severity
WPS Office: Improper Neutralization of Special Elements used in an OS Command
OS command injection vulnerability exists in WPS Office version 10.8.0.6186. If a remote attacker who can conduct a man-in-the-middle attack connects the product to a malicious server and sends a specially crafted data, an arbitrary OS command may be executed
- 7.8 High severity
The installer of WPS Office: Uncontrolled Search Path Element
The installer of WPS Office Version 10.8.0.5745 insecurely load shcore.dll, allowing an attacker to execute arbitrary code with the privilege of the user invoking the installer.
- 7.8 High severity
The installer of WPS Office: Uncontrolled Search Path Element
The installer of WPS Office Version 10.8.0.6186 insecurely load VERSION.DLL (or some other DLLs), allowing an attacker to execute arbitrary code with the privilege of the user invoking the installer.
- 7.8 High severity
KINGSOFT Internet Security 9 Plus: Out-of-bounds Write
The kernel mode driver kwatch3 of KINGSOFT Internet Security 9 Plus Version 2010.06.23.247 fails to properly handle crafted inputs, leading to stack-based buffer overflow.