Vulnerability · Published Mar 17, 2022 · Assigned by jpcert
CVE-2022-26511
High 7.8
In plain English
A high-severity uncontrolled search path in WPS Presentation from KINGSOFT JAPAN, INC.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 51% of all known vulnerabilities).
Severity (CVSS NVD)7.8High
Exploit odds (30 days)0.6%top 49.4% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
WPS Presentation 11.8.0.5745 insecurely load d3dx9_41.dll when opening .pps files('current directory type' DLL loading).
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| KINGSOFT JAPAN, INC. | WPS Presentation | Reported for Version 11.8.0.5745 |
Weakness: CWE-427
References
- https://support.kingsoft.jp/support-info/weakness.html x_refsource_CONFIRM
- JVN#21234459: Multiple vulnerabilities in KINGSOFT 'WPS Office' and 'KINGSOFT Internet Security' third-party-advisory, x_refsource_JVN