CVE-2024-7263

CVE-2024-7263 is a high-severity improper path validation vulnerability in Kingsoft WPS Office for Windows, affecting versions 12.2.0.13110 to 12.2.0.17115. This flaw allows an attacker to load an arbitrary Windows library due to insufficient sanitization of a parameter, bypassing a previous patch for a similar vulnerability. With a CVSS score of 7.8, it presents a significant risk of high impact to confidentiality, integrity, and availability, requiring user interaction for exploitation. This vulnerability is actively exploited in the wild by South Korea-linked threat actors, as evidenced by multiple media reports, despite no public exploit code being available on platforms like Metasploit or ExploitDB. The vulnerability has garnered notable community discussion and media coverage, indicating its importance.