CVE-2022-26081: Kingsoft WPS Office

High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days.

The installer of WPS Office Version 10.8.0.5745 insecurely load shcore.dll, allowing an attacker to execute arbitrary code with the privilege of the user invoking the installer.

Affected products

• Kingsoft WPS Office: version 10.8.0.5745 only

Published 2022-03-17. Last modified 2026-06-17.