NetEase

Records13All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical9CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

NetEase records in CISA KEV

No NetEase vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Cloudmusic 1 record LOW Neacsafe64 1 record MEDIUM Netease Cloudalbum 1 record MEDIUM Netease Pmail 1 record MEDIUM Netease Reader 1 record MEDIUM Netease Weibohd 1 record MEDIUM Neteaseweibo 1 record MEDIUM Pomelo 1 record LOW

Records

13 records

TI-2025-28828 CVE-2025-45737 · GHSA-qw4w-c724-67fx

An issue in NetEase (Hangzhou) Network Co., Ltd NeacSafe64 Driver before v1.0.0.8 allows…

MEDIUM 64

An issue in NetEase (Hangzhou) Network Co., Ltd NeacSafe64 Driver before v1.0.0.8 allows attackers to escalate privileges via sending crafted IOCTL commands to the NeacSafe64.sys component.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00332 Published 2025-06-27 No fix listed CWE-269

TI-2020-06141 CVE-2020-7620 · GHSA-4j54-mxf6-wxx2

OS command injection in pomelo-monitor

MEDIUM 46

pomelo-monitor through 0.3.7 is vulnerable to Command Injection.It allows injection of arbitrary commands as part of 'pomelo-monitor' params.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02175 Published 2020-04-02 No fix listed CWE-78

TI-2012-01209 CVE-2012-1385 · GHSA-hgcc-qxwv-q2jh

Unspecified vulnerability in the NetEase WeiboHD (com.netease.wbhd) application 1.0.0 for…

MEDIUM 46

Unspecified vulnerability in the NetEase WeiboHD (com.netease.wbhd) application 1.0.0 for Android has unknown impact and attack vectors.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.0137 Published 2012-03-07 No fix listed

TI-2012-01208 CVE-2012-1384 · GHSA-252p-f457-cpj4

Unspecified vulnerability in the NetEase Pmail (com.netease.rpmms) application 0.5.0 and…

MEDIUM 46

Unspecified vulnerability in the NetEase Pmail (com.netease.rpmms) application 0.5.0 and 0.5.2 for Android has unknown impact and attack vectors.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.0137 Published 2012-03-07 No fix listed

TI-2012-01207 CVE-2012-1383 · GHSA-5hjm-vj9w-fx27

Unspecified vulnerability in the NetEase Reader (com.netease.pris) application 1.1.2 and…

MEDIUM 45

Unspecified vulnerability in the NetEase Reader (com.netease.pris) application 1.1.2 and 1.2.0 for Android has unknown impact and attack vectors.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.01282 Published 2012-03-07 No fix listed

TI-2012-01206 CVE-2012-1382 · GHSA-cch5-3q89-3r2p

Unspecified vulnerability in the Youdao Dictionary (com.youdao.dict) application 1.6.1…

MEDIUM 45

Unspecified vulnerability in the Youdao Dictionary (com.youdao.dict) application 1.6.1, 2.0.1(2), and 3.0.0(1) for Android has unknown impact and attack vectors.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.01239 Published 2012-03-07 No fix listed

TI-2012-01205 CVE-2012-1381 · GHSA-2gwq-qf7f-gj9c

Unspecified vulnerability in the NetEase CloudAlbum (com.netease.cloudalbum) application…

MEDIUM 45

Unspecified vulnerability in the NetEase CloudAlbum (com.netease.cloudalbum) application 2.0.0 and 2.2.0 for Android has unknown impact and attack vectors.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.01282 Published 2012-03-07 No fix listed

TI-2012-01204 CVE-2012-1380 · GHSA-qm9j-q4r8-pwr5

Unspecified vulnerability in the NetEaseWeibo (com.netease.wb) application 1.2.1 and…

MEDIUM 45

Unspecified vulnerability in the NetEaseWeibo (com.netease.wb) application 1.2.1 and 1.2.2 for Android has unknown impact and attack vectors.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.01282 Published 2012-03-07 No fix listed

TI-2026-71264 CVE-2026-109422 · GHSA-8rjw-mvfx-hpfv

Remote code execution in NetEase Cloud Music for Windows

MEDIUM 42

NetEase Cloud Music client for Windows (cloudmusic.exe) versions 3.1.38 and 3.1.39.205426 contains a remote code execution vulnerability in the renderer-process IPC bridge os.navigateExternal, which passes caller-supplie…

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00522 Published 2026-10-12 No fix listed CWE-749

TI-2026-71265 CVE-2026-109423 · GHSA-mg5w-3rqq-96m8

TLS certificate validation flaw in NetEase Cloud Music for Windows

MEDIUM 40

NetEase Cloud Music client for Windows (cloudmusic.exe) versions 3.1.38 and 3.1.39.205426 contains a TLS certificate validation vulnerability that allows a network-adjacent attacker to intercept and decrypt HTTPS traffic…

CVSS 4.0CRITICAL 9.1 Network No auth No interaction EPSS 0.00155 Published 2026-10-12 No fix listed CWE-295

TI-2026-71266 CVE-2026-109424 · GHSA-h7w7-mfj4-5gxw

Weak encryption in NetEase Cloud Music for Windows API responses

LOW 35

NetEase Cloud Music client for Windows (cloudmusic.exe) versions 3.1.38 and 3.1.39.205426 contains a weak encryption vulnerability where /eapi/ and /xeapi/ API response bodies are decrypted using a fixed, publicly docume…

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00156 Published 2026-10-12 No fix listed CWE-321

TI-2023-25656 CVE-2023-47454 · GHSA-25m9-7chx-gp49

An Untrusted search path vulnerability in NetEase CloudMusic 2.10.4 for Windows allows…

LOW 34

An Untrusted search path vulnerability in NetEase CloudMusic 2.10.4 for Windows allows local users to gain escalated privileges through the urlmon.dll file in the current working directory.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00316 Published 2023-11-30 No fix listed CWE-427

TI-2019-13666 CVE-2019-18954 · GHSA-4x6v-rwh4-55jw

Pomelo v2.2.5 allows external control of critical state data.

LOW 26

Pomelo v2.2.5 allows external control of critical state data.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01157 Published 2019-11-13 Fixed in 2.2.7 CWE-668

Open these records in search →

Critical	9
High	2
Medium	2
Low	0
No CVSS	0