CVE-2024-7262Arbitrary Code Execution in WPS Office
Updated under an hour ago ()
Does this affect you?
It affects Kingsoft WPS Office. Add what you run to find out whether that includes you.
CISA lists it as known exploited since Sep 3, 2024; federal agencies had to remediate by Sep 24, 2024. Treat that date as your deadline.
Do this next
Free account, 1 product
Improper path validation in promecefpluginhost.exe in Kingsoft WPS Office version ranging from 12.2.0.13110 to 12.2.0.16412 (exclusive) on Windows allows an attacker to load an arbitrary Windows library. The vulnerability was found weaponized as a single-click exploit in the form of a deceptive spreadsheet document
- CVSS
- 9.3 CRITICAL (v4.0, CNA)CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/AU:N/RE:L
- Weakness (CWE)
- CWE-22
- Known exploited
- Added to CISA KEV Sep 3, 2024; federal remediation due Sep 24, 2024Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- EPSS (exploitation in the next 30 days)
- 2.94% (percentile 87)
- Assigned by
- ESET
- NVD analysis
- Analyzed
- Record last updated
- Oct 21, 2025
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Kingsoft WPS Office kingsoft:wps_office (from the name) | from 12.2.0.13110 before 12.2.0.16412 | CNA record |
kingsoft wps_office kingsoft:wps_office | from 12.2.0.13110 before 12.2.0.13489 | CISA ADP |
kingsoft wps_office kingsoft:wps_office | from 12.2.0.13110 before 12.2.0.16412 | NVD |
References
- https://www.wps.com/whatsnew/pc/20240422/vendor-advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-7262us-government-resource
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.