CVE-2023-31275: An uninitialized pointer use vulnerability exists in the functionality of WPS Office 11.2.0.11537 that handles Data elements in an Excel file. A specially…

PriorityP342high7.8CVSS 3.1

AVLACLPRNUIRSUCHIHAH

EPSS

1.69%

74.2th percentile

An uninitialized pointer use vulnerability exists in the functionality of WPS Office 11.2.0.11537 that handles Data elements in an Excel file. A specially crafted malformed file can lead to remote code execution. An attacker can provide a malicious file to trigger this vulnerability.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
kingsoft	wps_office	—	—
wps	wps_office	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.