PatchTheCVEkingsoftstore vulnerabilities
Recent CVEs affecting kingsoftstore products. 2 tracked.
kingsoftstore has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2018-03-12. Highest priority: CVE-2018-6217 (score 39/100).
- CVE-2018-6400 HIGH 7.8 DOWNGRADE Kingsoft WPS Office Free 10.2.0.5978 allows local users to gain privileges or cause a denial of service by imp
- CVE-2018-6217 MEDIUM 5.5 DOWNGRADE The WStr::_alloc_iostr_data() function in kso.dll in Kingsoft WPS Office 10.1.0.7106 and 10.2.0.5978 allows re
FAQ
How do I fix kingsoftstore vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is kingsoftstore being exploited right now?
None of the tracked kingsoftstore CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which kingsoftstore CVE should I patch first?
CVE-2018-6217 currently ranks highest (39/100): The WStr::_alloc_iostr_data() function in kso.dll in Kingsoft WPS Office 10.1.0.7106 and 10.2.0.5978 allows re.