Vulnerabilities (CVE)

Filtered by vendor Kingsoft Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-31275 1 Kingsoft 1 Wps Office 2023-12-01 N/A 7.8 HIGH
An uninitialized pointer use vulnerability exists in the functionality of WPS Office 11.2.0.11537 that handles Data elements in an Excel file. A specially crafted malformed file can lead to remote code execution. An attacker can provide a malicious file to trigger this vulnerability.
CVE-2020-25291 1 Kingsoft 1 Wps Office 2020-09-17 6.8 MEDIUM 7.8 HIGH
GdiDrawHoriLineIAlt in Kingsoft WPS Office before 11.2.0.9403 allows remote heap corruption via a crafted PLTE chunk in PNG data within a Word document. This is related to QBrush::setMatrix in gui/painting/qbrush.cpp in Qt 4.x.