CPE

Cpe:2.3:a:netease:cloud_music:3.1.38:::::windows::

1 brief RSS

Remote Code Execution in NetEase Cloud Music for Windows

NetEase Cloud Music versions 3.1.38 and 3.1.39.205426 are vulnerable to remote code execution due to improper validation of URL schemes in the IPC bridge, allowing arbitrary local binary execution via API response forgery.

Cloud Music remote-code-execution cve-2026-109422 windows ipc

1r 2t 1c 4m ago

Cpe:2.3:a:netease:cloud_music:3.1.38:*:*:*:*:windows:*:*

Remote Code Execution in NetEase Cloud Music for Windows

Cpe:2.3:a:netease:cloud_music:3.1.38:::::windows::