Approved changes feed: RSS · Atom

cpe:2.3:a:wps:wps_office:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWps (6af2a1d6-ec67-5efc-b7e3-cd0a4e99df4f)
ProductWps Office (735a7a8b-75d6-5976-b758-3f52ad5efa10)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-31275 vulnerable 2026-06-08 06:04:42.471256 Details available
HIGH (8.8)
An uninitialized pointer use vulnerability exists in the functionality of WPS Office 11.2.0.11537 that handles Data elements in an Excel file. A specially crafted malformed file can lead to remote code execution. An attacker can provide a malicious file to trigger this vulnerability.
Published: 2023-11-27T15:34:38.413Z
Updated: 2026-02-25T17:20:07.853Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-24934 vulnerable 2026-06-08 05:41:44.918772 Details available
wpsupdater.exe in Kingsoft WPS Office through 11.2.0.10382 allows remote code execution by modifying HKEY_CURRENT_USER in the registry.
Published: 2022-03-23T21:19:54.000Z
Updated: 2024-08-03T04:29:01.541Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-40399 vulnerable 2026-06-08 05:35:17.917040 Details available
HIGH (8.8)
An exploitable use-after-free vulnerability exists in WPS Spreadsheets ( ET ) as part of WPS Office, version 11.2.0.10351. A specially-crafted XLS file can cause a use-after-free condition, resulting in remote code execution. An attacker needs to provide a malformed file to the victim to trigger the vulnerability.
Published: 2022-05-12T17:01:24.812Z
Updated: 2025-04-15T19:04:10.988Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.