CVE-2023-31275

Summary

CVE-2023-31275 is a newly identified vulnerability affecting WPS Office 11.2.0.11537. This issue involves an uninitialized pointer use in the handling of Data elements within Excel files. A maliciously crafted file can exploit this weakness, resulting in remote code execution. An attacker can leverage this vulnerability by supplying a specially crafted Excel file to unsuspecting users, potentially leading to significant security risks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.