Design/Logic Flaw

2023-11-3021:15:00

PRIOn knowledge base

www.prio-n.com

logic flaw

vulnerability

privilege escalation

netease cloudmusic

windows

nvd

7.2 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

An Untrusted search path vulnerability in NetEase CloudMusic 2.10.4 for Windows allows local users to gain escalated privileges through the urlmon.dll file in the current working directory.

CPENameOperatorVersion
cloudmusiceq2.10.4

CPE	Name	Operator	Version
	cloudmusic	eq	2.10.4

References

github.com/xieqiang11/poc-3/tree/main