CVE-2025-26698

Severity CVSS v4.0:

Pending analysis

Type:

CWE-669 Incorrect Resource Transfer Between Spheres

Publication date:

26/02/2025

Last modified:

26/02/2025

Description

Incorrect resource transfer between spheres issue exists in RevoWorks SCVX and RevoWorks Browser. If exploited, malicious files may be downloaded to the system where using the product.

Impact

Vector 3.x

CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N CVSS v3.1 Severity and Metrics:

Base Score: 2.70 LOW
Vector: CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N

Attack Vector (AV): Local
Attack Complexity (AC): High
Privileges Required (PR): None
User Interaction (UI): Required
Scope (S): Changed
Confidentiality (C): None
Integrity (I): Low
Availability (A): None

Base Score 3.x

2.70

Severity 3.x

LOW

References to Advisories, Solutions, and Tools

https://jscom.jp/news-20250217/
https://jvn.jp/en/jp/JVN91300609/