CVE-2025-26698

Published: Feb 26, 2025Modified: Jun 17, 2026Deferred

2.7

Vector

CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N

Exploitability: 1.0 / Impact: 1.4

Source: vultures@jpcert.or.jp (Secondary)

Description

Incorrect resource transfer between spheres issue exists in RevoWorks SCVX and RevoWorks Browser. If exploited, malicious files may be downloaded to the system where using the product.

Related CWEs

CWE-669

Incorrect Resource Transfer Between Spheres

The product does not properly transfer a resource/behavior to another sphere, or improperly imports a resource/behavior from another sphere, in a manner that provides unintended control over that resource.

References (2)

https://jscom.jp/news-20250217/

Source: vultures@jpcert.or.jp

https://jvn.jp/en/jp/JVN91300609/

Source: vultures@jpcert.or.jp

Timeline

No history available yet.