Read the docs
TI-2024-06728 Aliases CVE-2024-7263GHSA-xx3f-44rh-4g76

Arbitrary Code Execution in WPS Office

Priority MEDIUM 42CWE-22Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
Passive
Attack complexity
Low
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

Improper path validation in promecefpluginhost.exe in Kingsoft WPS Office version ranging from 12.2.0.13110 to 12.2.0.17115 (exclusive) on Windows allows an attacker to load an arbitrary Windows library. The patch released in version 12.1.0.17119 to mitigate CVE-2024-7262 was not restrictive enough. Another parameter was not properly sanitized which leads to the execution of an arbitrary Windows library.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.0039 33rd percentileScored 2026-11-07
Fix Fixed WPS Office (Kingsoft): 12.2.0.17115

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
KingsoftWPS Office12.2.0.13110 to before 12.2.0.1711512.2.0.17115Patch availableCNA
  • WPS Office VendorKingsoft Affected 12.2.0.13110 to before 12.2.0.17115 Fixed in 12.2.0.17115 Patch available CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:a:kingsoft:wps_office:*:*:*:*:*:*:*:*12.2.0.13110 to before 12.2.0.17153VulnerableKingsoft
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*not specified by NVDRunning onMicrosoft
  • cpe:2.3:a:kingsoft:wps_office:*:*:*:*:*:*:*:* Versions 12.2.0.13110 to before 12.2.0.17153 Vulnerable ·Kingsoft
  • cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Microsoft

Remediation

  • Fix · CNA WPS Office (Kingsoft) Fixed in 12.2.0.17115

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-7263
  2. 2026-10-03 Alias added: GHSA-xx3f-44rh-4g76

References

Advisory 1

  • TI-2024-06727 Arbitrary Code Execution in WPS Office KEVCVSS 4.0CRITICAL 9.3
  • TI-2023-14959 Use of uninitialized resource in WPS Office CVSS 3.1HIGH 8.8
  • TI-2023-15830 OS command injection in Kingsoft WPS Office CVSS 3.1HIGH 8.1
  • TI-2020-15522 GdiDrawHoriLineIAlt in Kingsoft WPS Office before 11.2.0.9403 allows remote heap… CVSS 3.1HIGH 7.8
  • TI-2022-09548 Uncontrolled search path in Kingsoft The installer of WPS Office CVSS 3.1HIGH 7.8
  • TI-2022-09491 Uncontrolled search path in Kingsoft The installer of WPS Office CVSS 3.1HIGH 7.8
See all 9 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences