CVE-2024-56957: Medium severity wps office vulnerability
Published Jan 27, 2025
·Updated
An issue in Kingsoft Office Software Corporation Limited WPS Office iOS 12.20.0 allows attackers to access sensitive user information via supplying a crafted link.
Affected Software
1 affected component
Kingsoft WPS Office
Event History
Jan 27, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-56957?
CVE-2024-56957 is considered a high severity vulnerability due to the potential unauthorized access to sensitive user information.
2
How do I fix CVE-2024-56957?
To fix CVE-2024-56957, update to the latest version of WPS Office that addresses this vulnerability.
3
What kind of information can be accessed through CVE-2024-56957?
CVE-2024-56957 allows attackers to access sensitive user information through crafted links.
4
Which versions of WPS Office are affected by CVE-2024-56957?
CVE-2024-56957 affects WPS Office version 12.20.0 for iOS.
5
What should users do if they cannot update WPS Office to fix CVE-2024-56957?
If users cannot update, they should avoid using the application to access sensitive information until a fix is applied.