Read the docs
TI-2022-09548 Aliases CVE-2022-26081GHSA-xc4c-g546-wr9g

Uncontrolled search path in Kingsoft The installer of WPS Office

Priority LOW 36CWE-427Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-427.

Summary

The installer of WPS Office Version 10.8.0.5745 insecurely load shcore.dll, allowing an attacker to execute arbitrary code with the privilege of the user invoking the installer.

Why it matters now

EPSS 0.00825 57th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
KingsoftThe installer of WPS OfficeReported for Version 10.8.0.5745—No fix listedCNA
  • The installer of WPS Office VendorKingsoft Affected Reported for Version 10.8.0.5745 Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:kingsoft:wps_office:10.8.0.5745:*:*:*:*:*:*:*10.8.0.5745VulnerableKingsoft
  • cpe:2.3:a:kingsoft:wps_office:10.8.0.5745:*:*:*:*:*:*:* Versions 10.8.0.5745 Vulnerable ·Kingsoft

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-26081
  2. 2026-10-03 Alias added: GHSA-xc4c-g546-wr9g

References

Advisory 2

  • TI-2024-06727 Arbitrary Code Execution in WPS Office KEVCVSS 4.0CRITICAL 9.3
  • TI-2023-14959 Use of uninitialized resource in WPS Office CVSS 3.1HIGH 8.8
  • TI-2024-06728 Arbitrary Code Execution in WPS Office CVSS 4.0CRITICAL 9.3
  • TI-2023-15830 OS command injection in Kingsoft WPS Office CVSS 3.1HIGH 8.1
  • TI-2020-15522 GdiDrawHoriLineIAlt in Kingsoft WPS Office before 11.2.0.9403 allows remote heap… CVSS 3.1HIGH 7.8
  • TI-2022-09491 Uncontrolled search path in Kingsoft The installer of WPS Office CVSS 3.1HIGH 7.8
See all 9 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences