CVE-2018-6400

7.8 highEPSS 0.3%

Kingsoft WPS Office Free 10.2.0.5978 allows local users to gain privileges or cause a denial of service by impersonating all the pipes through a use of \\.\pipe\WPSCloudSvr\WpsCloudSvr -- an "insecurely created named pipe." Ensures full access to Everyone users group.

Severity

CVSS 3.0

7.8 high

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 25% of CVEs (scores of 2026-10-31)
Published: 2018-03-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

kingsoftstore:wps_office_free

References

http://seclists.org/fulldisclosure/2018/Mar/27
https://jvn.jp/en/jp/JVN14434132/
https://www.wps365.jp/notices/4
http://seclists.org/fulldisclosure/2018/Mar/27

Check your stack JSON