Riskcovery

CVE-2025-26698

State
Published
Severity
2.7 Low
Published
Feb 26, 2025
Updated
Feb 26, 2025
Reserved
Feb 14, 2025

Read the record on cve.org

Description

Incorrect resource transfer between spheres issue exists in RevoWorks SCVX and RevoWorks Browser. If exploited, malicious files may be downloaded to the system where using the product.

Scores

CVSSScoreVectorSource
3.02.7 LowCVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:Njpcert

Weaknesses

  • CWE-669 Incorrect resource transfer between spheres

Affected Products

ProductVersions
RevoWorks SCVXJ’s Communication Co., Ltd.
  • 4.0.234 and earlier 4 series versionsAffected
  • 5.0.7 and earlier 5 series versionsAffected
RevoWorks BrowserJ’s Communication Co., Ltd.
  • 2.2.100 and earlier 2 series versionsAffected
  • 3.0.1 and earlier 3 series versionsAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.