CVE-2022-25943

published 2022-03-09

CVE-2022-25943: The installer of WPS Office for Windows versions prior to v11.2.0.10258 fails to configure properly the ACL for the directory where the service program is…

Priority P3 38 high 7.8 CVSS 3.1

AV L AC L PR L UI N S U C H I H A H

The installer of WPS Office for Windows versions prior to v11.2.0.10258 fails to configure properly the ACL for the directory where the service program is installed.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
kingsoft	wps_office	< 11.2.0.10258	11.2.0.10258
wps_office_software	wps_office_for_windows	—	—

CVSS provenance

nvd v3.1 7.8 HIGH CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

nvd v2.0 4.6 MEDIUM AV:L/AC:L/Au:N/C:P/I:P/A:P

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-276