CVE-2024-7262

Kingsoft WPS Office allows arbitrary Windows library loading via path traversal in promecefpluginhost.exe, enabling remote code execution.

This vulnerability permits attackers to load arbitrary libraries in the WPS Office plugin host, creating a remote code execution (RCE) vector that bypasses standard sandboxing. DIB organizations must immediately patch WPS Office deployments to prevent unauthorized code execution and potential data exfiltration, as this flaw is actively exploited in the wild.

Shame score — The vendor shipped a critical RCE vulnerability in a widely used office suite that is actively exploited, indicating a failure in timely patching and security hardening.