What’s Vulnerable › Products

NetEase Cloud Music for Windows vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your NetEase Cloud Music for Windows version is affected

Latest NetEase Cloud Music for Windows vulnerabilities

• CVE-2026-109424 — NetEase Cloud Music Weak Encryption via eapi/xeapi (CVSS 5.9)
• CVE-2026-109423 — NetEase Cloud Music TLS Certificate Validation Bypass (CVSS 7.4)
• CVE-2026-109422 — NetEase Cloud Music RCE via os.navigateExternal IPC (CVSS 8.1)