TI-2023-14959 Aliases CVE-2023-31275 GHSA-cfc9-f8qw-f5wh

Use of uninitialized resource in WPS Office

HIGH 73CWE-457Published 2023-11-27 · Updated 2026-02-25

Key facts

Attack vector: Network
Privileges required: None
User interaction: Required
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: High · High · High
Fix status: No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

An uninitialized pointer use vulnerability exists in the functionality of WPS Office 11.2.0.11537 that handles Data elements in an Excel file. A specially crafted malformed file can lead to remote code execution. An attacker can provide a malicious file to trigger this vulnerability.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV

EPSS 0.01692 77th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: Poc
Automatable: No
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
WPS	WPS Office	11.2.0.11537	—	No fix listed	CNA

WPS Office VendorWPS Affected 11.2.0.11537 Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:kingsoft:wps_office:11.2.0.11537:::::::*	11.2.0.11537	Vulnerable	Kingsoft

cpe:2.3:a:kingsoft:wps_office:11.2.0.11537:*:*:*:*:*:*:* Versions 11.2.0.11537 Vulnerable ·Kingsoft

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2023-31275
2026-10-03 Alias added: GHSA-cfc9-f8qw-f5wh

References

Advisory 1

https://talosintelligence.com/vulnerability_reports/TALOS-2023-1748

TI-2022-08738 wpsupdater.exe in Kingsoft WPS Office through 11.2.0.10382 allows remote code execution… CVSS 3.1CRITICAL 9.8
TI-2021-17463 Use after free in WPS Office CVSS 3.1HIGH 7.8
TI-2014-01800 cn.wps.moffice.common.beans.print.CloudPrintWebView in Kingsoft Office 5.3.1, as used in… CVSS 3.1HIGH 8.1
TI-2018-04706 The WStr::assign function in kso.dll in Kingsoft WPS Office 10.1.0.7106 and 10.2.0.5978… CVSS 3.1MEDIUM 6.5
TI-2014-05531 The Kingsoft Clip (Office Tool) (aka cn.wps.clip) application 1.5.1 for Android does not… CVSS 2.0MEDIUM 5.4

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences