CVE-2023-47454

PoC —

CVSS 3.1

7.8 high

EPSS

<1%p24

Published

Nov 30, 2023 (Nov 30, 2023)

Modified

Jun 17, 2026

Description

An Untrusted search path vulnerability in NetEase CloudMusic 2.10.4 for Windows allows local users to gain escalated privileges through the urlmon.dll file in the current working directory.

Vendors: netease
Products: cloudmusic
Weakness: CWE-427
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.