Skip to content
Threat Feed
Subscribe

Product

Cloud Music (3.1.38, 3.1.39.205426)

1 brief RSS
high advisory

Remote Code Execution in NetEase Cloud Music for Windows

NetEase Cloud Music versions 3.1.38 and 3.1.39.205426 are vulnerable to remote code execution due to improper validation of URL schemes in the IPC bridge, allowing arbitrary local binary execution via API response forgery.

Cloud Music remote-code-execution cve-2026-109422 windows ipc
1r 2t 1c