CVE-2022-25969: Kingsoft WPS Office

High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days.

The installer of WPS Office Version 10.8.0.6186 insecurely load VERSION.DLL (or some other DLLs), allowing an attacker to execute arbitrary code with the privilege of the user invoking the installer.

Affected products

• Kingsoft WPS Office: version 10.8.0.6186 only

Published 2022-03-17. Last modified 2026-06-17.