{"id":"CVE-2024-7262","aliases":["EUVD-2024-48209","GHSA-p736-fp6q-qr5j"],"status":"published","title":"Arbitrary Code Execution in WPS Office","description":"Improper path validation in promecefpluginhost.exe in Kingsoft WPS Office version ranging from 12.2.0.13110 to 12.2.0.16412 (exclusive) on Windows allows an attacker to load an arbitrary Windows library.\nThe vulnerability was found weaponized as a single-click exploit in the form of a deceptive spreadsheet document","severity":{"version":"4.0","score":9.3,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/AU:N/RE:L","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.03058,"percentile":0.87705,"model":"v2026.06.15"},"facts":{"in_kev":true,"known_exploited":true,"public_exploit":false,"fix_available":false},"cwes":["CWE-22"],"published":"2024-08-15T14:24:44Z","modified":"2026-06-17T08:19:43Z","kev":{"date_added":"2024-09-03","due_date":"2024-09-24","required_action":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","known_ransomware_use":"Unknown"},"exploitation":[{"source":"euvd","since":"2024-09-03"},{"source":"kev","since":"2024-09-03"}],"products":[{"vendor":"kingsoft","product":"wps office"},{"vendor":"kingsoft","product":"wps_office"},{"vendor":"wps","product":"wps office"}],"references":[{"url":"https://www.wps.com/whatsnew/pc/20240422/","tags":["Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-7262","tags":["government-resource","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-7262"},{"url":"https://www.wps.com/whatsnew/pc/20240422"},{"url":"https://github.com/advisories/GHSA-p736-fp6q-qr5j"}],"sources":{"cve":[{"id":"CVE-2024-7262","title":"Arbitrary Code Execution in WPS Office","description":"Improper path validation in promecefpluginhost.exe in Kingsoft WPS Office version ranging from 12.2.0.13110 to 12.2.0.16412 (exclusive) on Windows allows an attacker to load an arbitrary Windows library.\nThe vulnerability was found weaponized as a single-click exploit in the form of a deceptive spreadsheet document","status":"published","published":"2024-08-15T14:24:44.511Z","modified":"2025-10-21T22:55:47.179Z","cvss":[{"version":"4.0","score":9.3,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/AU:N/RE:L","level":"critical","assessor":"cna"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:34:20.673123Z"}],"euvd":[{"id":"EUVD-2024-48209","description":"Improper path validation in promecefpluginhost.exe in Kingsoft WPS Office version ranging from 12.2.0.13110 to 12.2.0.16412 (exclusive) on Windows allows an attacker to load an arbitrary Windows library.\nThe vulnerability was found weaponized as a single-click exploit in the form of a deceptive spreadsheet document","status":"published","published":"2024-08-15T14:24:44Z","modified":"2025-10-21T22:55:47Z","cvss":[{"version":"4.0","score":9.3,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/AU:N/RE:L","level":"critical"}],"exploited_since":"2024-09-03","updated_at":"2026-11-02T20:31:28.525814Z"}],"ghsa":[{"id":"GHSA-p736-fp6q-qr5j","title":"Improper path validation in promecefpluginhost.exe in Kingsoft WPS Office version ranging from 12...","description":"Improper path validation in promecefpluginhost.exe in Kingsoft WPS Office version ranging from 12.2.0.13110 to 12.2.0.13489 on Windows allows an attacker to load an arbitrary Windows library.\nUsing the MHTML format allows an attacker to automatically deliver a malicious library on opening the document and a single user click on a crafted hyperlink leads to the execution of the library.","status":"published","published":"2024-08-15T15:30:58Z","modified":"2025-10-22T00:34:11Z","cvss":[{"version":"4.0","score":9.3,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:X/V:X/RE:L/U:X","level":"critical"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T15:04:09.266545Z"}],"kev":[{"id":"CVE-2024-7262","title":"Kingsoft WPS Office Path Traversal Vulnerability","description":"Kingsoft WPS Office contains a path traversal vulnerability in promecefpluginhost.exe on Windows that allows an attacker to load an arbitrary Windows library.","cwes":["CWE-22"],"kev":{"date_added":"2024-09-03","due_date":"2024-09-24","required_action":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","known_ransomware_use":"Unknown"},"updated_at":"2026-11-02T17:00:16.234141Z"}],"nvd":[{"id":"CVE-2024-7262","description":"Improper path validation in promecefpluginhost.exe in Kingsoft WPS Office version ranging from 12.2.0.13110 to 12.2.0.16412 (exclusive) on Windows allows an attacker to load an arbitrary Windows library.\nThe vulnerability was found weaponized as a single-click exploit in the form of a deceptive spreadsheet document","status":"published","published":"2024-08-15T15:15:22.29Z","modified":"2026-06-17T08:19:43.623Z","cvss":[{"version":"4.0","score":9.3,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:X/V:X/RE:L/U:X","level":"critical","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:10:19.135392Z"}]}}