CVE-2024-7262

Summary

CVE-2024-7262 is a new vulnerability affecting Kingsoft WPS Office, specifically versions 12.2.0.13110 to 12.2.0.13489 on Windows. This issue stems from improper path validation in promecefpluginhost.exe, resulting in an attacker's ability to load an arbitrary Windows library. The consequence of this action can lead to code execution with the same privileges as the application, potentially allowing malicious activities. A single-click exploit in the form of a deceptive spreadsheet document has already been discovered, taking advantage of this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.