PatchTheCVEkingsoft vulnerabilities
Recent CVEs affecting kingsoft products. 3 tracked.
kingsoft has 3 tracked vulnerabilities, 0 critical and 1 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 2. Most recent: 2025-05-14. Highest priority: CVE-2024-7262 (score 74/100).
- CVE-2024-7263 HIGH 7.8 UPGRADE Improper path validation in promecefpluginhost.exe in Kingsoft WPS Office version ranging from 12.2.0.13110 to
- CVE-2024-7262 HIGH 7.8 EXPLOITED UPGRADE Kingsoft WPS Office Path Traversal Vulnerability
- CVE-2024-57096 MEDIUM 5.5 MITIGATE An issue in wps office before v.19302 allows a local attacker to obtain sensitive information via a crafted fi
FAQ
How do I fix kingsoft vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is kingsoft being exploited right now?
Yes: 1 kingsoft CVE is on the CISA Known Exploited Vulnerabilities list, so patch it first.
Which kingsoft CVE should I patch first?
CVE-2024-7262 currently ranks highest (74/100): Kingsoft WPS Office Path Traversal Vulnerability.