NetEase vulnerabilities
We track 4 vulnerabilities in NetEase products across 3 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on October 12, 2026.
Latest NetEase vulnerabilities
- 7.4 High severity
NetEase Cloud Music for Windows: Improper Certificate Validation
NetEase Cloud Music client for Windows (cloudmusic.exe) versions 3.1.38 and 3.1.39.205426 contains a TLS certificate validation vulnerability that allows a network-adjacent attacker to intercept and decrypt HTTPS traffic by failing to validate the server certi
- 8.1 High severity
NetEase Cloud Music for Windows: Exposed Dangerous Method or Function
NetEase Cloud Music client for Windows (cloudmusic.exe) versions 3.1.38 and 3.1.39.205426 contains a remote code execution vulnerability in the renderer-process IPC bridge os.navigateExternal, which passes caller-supplied URLs to ShellExecuteW without validati
- 9.8 Critical severity
netease-youdao/qanything: Improper Neutralization of Special Elements used in an SQL Command
netease-youdao/qanything version 1.4.1 contains a vulnerability where unsafe data obtained from user input is concatenated in SQL queries, leading to SQL injection. The affected functions include `get_knowledge_base_name`, `from_status_to_status`, `delete_file
- 7.8 High severity
Cloudmusic: Uncontrolled Search Path Element
An Untrusted search path vulnerability in NetEase CloudMusic 2.10.4 for Windows allows local users to gain escalated privileges through the urlmon.dll file in the current working directory.