CVE-2024-7262

CVE-2024-7262 is an improper path validation vulnerability in Kingsoft WPS Office for Windows (versions 12.2.0.13110 to 12.2.0.16412 exclusive) that allows attackers to load arbitrary Windows libraries. This vulnerability carries a high CVSS score of 7.8, indicating a high impact on confidentiality, integrity, and availability, and can be exploited with a single user interaction via a deceptive document. It is actively exploited in the wild, as confirmed by its presence in CISA's KEV catalog, and has garnered significant community discussion and media coverage, including reports of its use by South Korean threat actors. While no public exploit code is available, its active exploitation and high FAUCET Risk Score of 99/100 underscore its critical nature.