CVE-2024-7263: Improper path validation in promecefpluginhost.exe in Kingsoft WPS Office version ranging from 12.2.0.13110 to

Routine

HIGH 7.8UPGRADE

CVE-2024-7263 is a high-severity flaw (CVSS 7.8) affecting wps office. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

Improper path validation in promecefpluginhost.exe in Kingsoft WPS Office version ranging from 12.2.0.13110 to 12.2.0.17115 (exclusive) on Windows allows an attacker to load an arbitrary Windows library. The patch released in version 12.1.0.17119 to mitigate CVE-2024-7262 was not restrictive enough. Another parameter was not properly sanitized which leads to the execution of an arbitrary Windows library.

Why this priority

High severity

A fixed release or distro patch exists.

Risk facts

CVSS score	7.8 (High)
Attack vector	Local
Attack complexity	Low
Privileges needed	None
User interaction	Required
EPSS exploit chance	0.4% (top 67%)
CISA exploited list	No
Weakness	CWE-22
Published	2024-08-15
Last modified	2026-06-17

Publisher (CNA): ESET · Vendor: kingsoft

Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2024-08-15 15:15 UTCPublished CVE record published
2026-06-17 08:19 UTCUpdated Record last modified

kingsoft wps office UPGRADE

Affected: >= 12.2.0.13110 and < 12.2.0.17153

Fixed in: 12.2.0.17153

Safe to downgrade to: a release before 12.2.0.13110

1. Check installed version

apt-cache policy wps-office || rpm -q wps-office || wps-office --version

2. UPGRADE to 12.2.0.17153 (Debian / Ubuntu)

sudo apt update && sudo apt install --only-upgrade wps-office

2. UPGRADE (RHEL / Amazon Linux / Fedora)

sudo dnf upgrade wps-office

Note

Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.

3. If no update is available yet, DOWNGRADE to a release before 12.2.0.13110 (Debian / Ubuntu)

apt-cache madison wps-office sudo apt install wps-office=<VERSION_BEFORE_12.2.0.13110> sudo apt-mark hold wps-office

3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list wps-office sudo dnf downgrade wps-office-<VERSION_BEFORE_12.2.0.13110> sudo dnf versionlock add wps-office

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2024-7263?

wps office: upgrade to 12.2.0.17153. Exact commands for each OS are on this page.

Is CVE-2024-7263 being exploited?

CVE-2024-7263 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2024-7263 affect?

CVE-2024-7263 affects wps office. Severity is high (CVSS 7.8). Improper path validation in promecefpluginhost.exe in Kingsoft WPS Office version ranging from 12.2.0.13110 to 12.2.0.17115 (exclusive) on Windows allows an attacker to load an arbitrary Windows library. The patch released in version 12.1.0

How urgent is CVE-2024-7263?

Priority 36/100. High severity

Software pages

Windows vulnerabilities

Related CVEs

CVE-2024-7262 HIGH 7.8 EXPLOITED UPGRADE Kingsoft WPS Office Path Traversal Vulnerability
CVE-2024-57096 MEDIUM 5.5 MITIGATE An issue in wps office before v.19302 allows a local attacker to obtain sensitive information via a crafted fi

References

← Back to latest CVEs