CVE-2022-25943

7.8 highEPSS 0.7%

High (7.8) in kingsoft wps office. EPSS 0.7% chance of exploitation in the next 30 days.

The installer of WPS Office for Windows versions prior to v11.2.0.10258 fails to configure properly the ACL for the directory where the service program is installed.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 53% of CVEs (scores of 2026-10-31)
CWE: CWE-276
Published: 2022-03-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

kingsoft:wps_office

References

https://github.com/HadiMed/KINGSOFT-WPS-Office-LPE
https://jvn.jp/en/vu/JVNVU90673830/
https://www.wps.com/whatsnew/pc/20210806/
https://github.com/HadiMed/KINGSOFT-WPS-Office-LPE
https://jvn.jp/en/vu/JVNVU90673830/

Check your stack JSON