KINGSOFT JAPAN, INC.
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| The installer of WPS Office | 2 | – | Mar 17, 2022 |
| KINGSOFT Internet Security 9 Plus | 1 | – | Mar 17, 2022 |
| WPS Office | 1 | – | Jun 13, 2023 |
| WPS Presentation | 1 | – | Mar 17, 2022 |
Exploited and recent CVEs
- CVE-2023-32548 OS command injection vulnerability exists in WPS Office version 10.8.0.6186. If a remote attacker who can conduct a man-in-the-middle attack connects the product to a malicious server and sends a spec 1.1%
- CVE-2022-26511 WPS Presentation 11.8.0.5745 insecurely load d3dx9_41.dll when opening .pps files('current directory type' DLL loading). 0.6%
- CVE-2022-26081 The installer of WPS Office Version 10.8.0.5745 insecurely load shcore.dll, allowing an attacker to execute arbitrary code with the privilege of the user invoking the installer. 0.8%
- CVE-2022-25969 The installer of WPS Office Version 10.8.0.6186 insecurely load VERSION.DLL (or some other DLLs), allowing an attacker to execute arbitrary code with the privilege of the user invoking the installer. 0.8%
- CVE-2022-25949 The kernel mode driver kwatch3 of KINGSOFT Internet Security 9 Plus Version 2010.06.23.247 fails to properly handle crafted inputs, leading to stack-based buffer overflow. 0.8%