Skip to content
OpenAdvisories

Vendor

NetEase

3 known vulnerabilities.

Products

NetEase Cloud Music for Windows 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.4
    CVE-2026-109423

    NetEase Cloud Music TLS Certificate Validation Bypass

    NetEase Cloud Music client for Windows (cloudmusic.exe) versions 3.1.38 and 3.1.39.205426 contains a TLS certificate validation vulnerability that allows a network-adjacent attacker to intercept and decrypt HTTPS traffic by failing to validate the server cert…

    NetEase NetEase Cloud Music for Windows Windows
  • High 8.1
    CVE-2026-109422

    NetEase Cloud Music RCE via os.navigateExternal IPC

    NetEase Cloud Music client for Windows (cloudmusic.exe) versions 3.1.38 and 3.1.39.205426 contains a remote code execution vulnerability in the renderer-process IPC bridge os.navigateExternal, which passes caller-supplied URLs to ShellExecuteW without validat…

    NetEase NetEase Cloud Music for Windows Windows