CVE-2022-25943: Kingsoft WPS Office

High severity, CVSS 7.8. EPSS: 0.7% chance of exploitation in the next 30 days.

The installer of WPS Office for Windows versions prior to v11.2.0.10258 fails to configure properly the ACL for the directory where the service program is installed.

Affected products

• Kingsoft WPS Office: before 11.2.0.10258 (fixed in 11.2.0.10258)

Published 2022-03-09. Last modified 2026-06-17.