Approved changes feed: RSS · Atom

cpe:2.3:a:kingsoft:wps_office:10.8.0.6186:*:*:*:*:*:*:*

part: a version: 10.8.0.6186 update: *

VendorKingsoft (2b924ae7-5ec4-5fb4-b06b-1abf462f9b00)
ProductWps Office (92893964-a0a5-5b26-9a85-45d7802dd0c4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-32548 vulnerable 2026-06-03 14:51:59.216471 Details available
OS command injection vulnerability exists in WPS Office version 10.8.0.6186. If a remote attacker who can conduct a man-in-the-middle attack connects the product to a malicious server and sends a specially crafted data, an arbitrary OS command may be executed on the system where the product is installed.
Published: 2023-06-13T00:00:00.000Z
Updated: 2025-01-03T19:23:14.601Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-25969 vulnerable 2026-06-03 14:46:40.966261 Details available
The installer of WPS Office Version 10.8.0.6186 insecurely load VERSION.DLL (or some other DLLs), allowing an attacker to execute arbitrary code with the privilege of the user invoking the installer.
Published: 2022-03-17T17:15:38.000Z
Updated: 2024-08-03T04:56:36.775Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.