Cloud Vulnerability DB
An open project to list all known cloud vulnerabilities and Cloud Service Provider security issues
Vulnerability DatabaseCVE-2024-13187
CVE-2024-13187:
Kingsoft WPS Office vulnerability analysis and mitigation
Overview
A critical vulnerability has been identified in Kingsoft WPS Office 6.14.0 on macOS. The vulnerability affects the TCC Handler component and involves code injection capabilities. The issue was disclosed in January 2025 and has been assigned CVE-2024-13187 (NVD).
Technical details
The vulnerability stems from the absence of the Hardened Runtime signing option in the WPS Office macOS application, which is a security mechanism designed to prevent code injection attacks. Without this protection, attackers can perform DYLDINSERTLIBRARY injection and dylib hijacking. The vulnerability has been assigned a CVSS v4.0 score of 4.8 (Medium) and CVSS v3.1 score of 5.3 (Medium) (VulDB).
Impact
The vulnerability allows attackers to bypass the TCC (Transparency, Consent and Control) mechanism by loading malicious dylib into the WPS process. This enables unauthorized access to sensitive components such as cameras, microphones, and user directories (Documents, Downloads, Library, etc.) that WPS has been granted permission to access. The injected code runs with the same permissions as WPS, potentially leading to privacy violations and unauthorized data access (GitHub).
Mitigation and workarounds
The primary solution is to enable the Hardened Runtime option in the application's code signing configuration. This simple configuration change can significantly reduce the risk of code injection and improve the overall security of the application (GitHub).
Additional resources
Source: This report was generated using AI
Free Vulnerability Assessment
Benchmark your Cloud Security Posture
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
Ready to see Wiz in action?
“Best User Experience I have ever seen, provides full visibility to cloud workloads.”
David EstlickCISO
“Wiz provides a single pane of glass to see what is going on in our cloud environments.”
Adam FletcherChief Security Officer
“We know that if Wiz identifies something as critical, it actually is.”
Greg PoniatowskiHead of Threat and Vulnerability Management