Incorrect resource transfer between spheres issue exists in RevoWorks SCVX and RevoWorks…
Priority LOW 13CWE-669Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- None
- User interaction
- Required
- Attack complexity
- High
- Impact type
- —
- Confidentiality · integrity · availability
- None · Low · None
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · CNA. Fix status from CNA.
Summary
Incorrect resource transfer between spheres issue exists in RevoWorks SCVX and RevoWorks Browser. If exploited, malicious files may be downloaded to the system where using the product.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00207 10th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| J’s Communication Co., Ltd. | RevoWorks SCVX | 4.0.234 and earlier 4 series versions; 5.0.7 and earlier 5 series versions | — | No fix listed | CNA |
| J’s Communication Co., Ltd. | RevoWorks Browser | 2.2.100 and earlier 2 series versions; 3.0.1 and earlier 3 series versions | — | No fix listed | CNA |
- RevoWorks SCVX VendorJ’s Communication Co., Ltd. Affected 4.0.234 and earlier 4 series versions; 5.0.7 and earlier 5 series versions Fixed in — No fix listed CNA
- RevoWorks Browser VendorJ’s Communication Co., Ltd. Affected 2.2.100 and earlier 2 series versions; 3.0.1 and earlier 3 series versions Fixed in — No fix listed CNA
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2025-26698
References
More J’s Communication Co., Ltd. vulnerabilities
- TI-2021-04016 Improper control of program execution vulnerability in RevoWorks Browser 2.1.230 and… CVSS 3.1CRITICAL 9.6
- TI-2021-04017 Improper access control vulnerability in RevoWorks Browser 2.1.230 and earlier allows an… CVSS 3.1CRITICAL 9.3
- TI-2024-31847 Incorrect authorization in J’s Communication Co., Ltd. RevoWorks Cloud Client CVSS 3.0HIGH 7.8
- TI-2022-10300 Incomplete filtering of special elements vulnerability exists in RevoWorks SCVX using… CVSS 3.1HIGH 7.8
Sources
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences