CVE-2022-26081

Name of the Vulnerable Software and Affected Versions WPS Office version 10.8.0.5745

Description The issue is related to the insecure loading of the shcore.dll dynamic library by the installer of WPS Office, allowing an attacker to execute arbitrary code with the privilege of the user invoking the installer. This can potentially lead to privilege escalation and the execution of malicious code.

Recommendations For WPS Office version 10.8.0.5745, consider updating to a newer version that addresses this issue, as the current version insecurely loads the shcore.dll library, posing a risk of arbitrary code execution. At the moment, there is no information about a newer version that contains a fix for this vulnerability.