Vulnerability record · CVE-2022-24934 · published 23 March 2022

CVE-2022-24934: Wps office vulnerability

Wps · Wps Office

wpsupdater.exe in Kingsoft WPS Office through 11.2.0.10382 allows remote code execution by modifying HKEY_CURRENT_USER in the registry.

9.8 CVSS 3.1 Critical EPSS 20% · top 2.6%

9.8CVSS 3.1 base score, v2 7.5

20%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

4References, 2 tagged exploit

17 Jun 2026Last modified by NVD

Description

wpsupdater.exe in Kingsoft WPS Office through 11.2.0.10382 allows remote code execution by modifying HKEY_CURRENT_USER in the registry.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Wps Office Wps

References

Link	Tags
https://decoded.avast.io/luigicamastra/operation-dragon-castling-apt-group-targeting-betting-companies/	ExploitThird Party Advisory
https://www.wps.com	Vendor Advisory
https://decoded.avast.io/luigicamastra/operation-dragon-castling-apt-group-targeting-betting-companies/	ExploitThird Party Advisory
https://www.wps.com	Vendor Advisory

Track CVE-2022-24934 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.1CVE-2014-2271Wps office improper input validation vulnerabilitycn.wps.moffice.common.beans.print.CloudPrintWebView in Kingsoft Office 5.3.1, as used in Huawei P2 devices before V100R001C00B043, falls back to HTTP…EPSS 1.5%14 Jan 2020 7.8CVE-2021-40399Wps office use after free vulnerabilityAn exploitable use-after-free vulnerability exists in WPS Spreadsheets ( ET ) as part of WPS Office, version 11.2.0.10351. A specially-crafted XLS fi…EPSS 1.3%12 May 2022 6.5CVE-2018-6390Wps office memory buffer overflow vulnerabilityThe WStr::assign function in kso.dll in Kingsoft WPS Office 10.1.0.7106 and 10.2.0.5978 does not validate the size of the source memory block before …EPSS 1.1%29 Jan 2018

Source: NIST National Vulnerability Database (record CVE-2022-24934), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.