Vulnerabilityhigh
APT group exploits WPS Office for Windows RCE vulnerability (CVE-2024-7262)
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2024-7262+1 related CVE | Path Traversal Arbitrary Library Load in Kingsoft WPS Office for Windows | 9.3 | 3% | KEV | KEV |
From the original article
2 min read at helpnetsecurity.com
ESET researchers discovered a remote code execution vulnerability in WPS Office for Windows (CVE-2024-7262). APT-C-60, a South Korea-aligned cyberespionage group, was exploiting it to target East Asian countries. When examining the root cause, ESET discovered another way to exploit the faulty code (CVE-2924-7263).
By @helpnetsecurity · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.