CVE-2018-6400: Kingsoft WPS Office Free 10.2.0.5978 allows local users to gain privileges or cause a denial of service by...

Security readout for executives and security teams

This vulnerability affects Kingsoft WPS Office Free 10.2.0.5978. A local user could abuse an insecure Windows named pipe that grants Everyone full access to gain higher privileges or cause denial of service. Business urgency is highest on shared Windows endpoints, VDI, kiosks, and systems where untrusted local users can sign in. Exposure appears limited to Windows systems running Kingsoft WPS Office Free 10.2.0.5978 where a local attacker already has user access. Broader WPS editions, later versions, and remote attack exposure are not confirmed by the supplied sources. Treat this as a targeted endpoint hygiene issue, not an internet-wide emergency. Prioritize environments with shared Windows access or strict privilege boundaries. If vulnerable installations are rare or limited to single-user workstations, remediation can follow normal patch management after vendor guidance is confirmed. Mitigation focus: Inventory Windows endpoints for WPS Office Free 10.2.0.5978.; Check Kingsoft, WPS365, and JVN guidance for fixed versions or vendor mitigation.; Remove vulnerable WPS installations where the software is not required..

Prepared

Jun 7, 2026, 14:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.