PatchTheCVEwps vulnerabilities
Recent CVEs affecting wps products. 2 tracked.
wps has 2 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 1. Most recent: 2022-05-12. Highest priority: CVE-2022-24934 (score 69/100).
- CVE-2022-24934 CRITICAL 9.8 UPGRADE wpsupdater.exe in Kingsoft WPS Office through 11.2.0.10382 allows remote code execution by modifying HKEY_CURR
- CVE-2021-40399 HIGH 7.8 DOWNGRADE An exploitable use-after-free vulnerability exists in WPS Spreadsheets ( ET ) as part of WPS Office, version 1
FAQ
How do I fix wps vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is wps being exploited right now?
None of the tracked wps CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which wps CVE should I patch first?
CVE-2022-24934 currently ranks highest (69/100): wpsupdater.exe in Kingsoft WPS Office through 11.2.0.10382 allows remote code execution by modifying HKEY_CURR.