CVE-2025-26698 — J’s Communication Co., Ltd. / RevoWorks SCVX

CVE-2025-26698

J’s Communication Co., Ltd. / RevoWorks SCVX PUBLISHED

Description (CNA)

Incorrect resource transfer between spheres issue exists in RevoWorks SCVX and RevoWorks Browser. If exploited, malicious files may be downloaded to the system where using the product.

Affected (CNA)

Vendor / product	Versions
J’s Communication Co., Ltd. / RevoWorks SCVX	affected 4.0.234 and earlier 4 series versions; affected 5.0.7 and earlier 5 series versions
J’s Communication Co., Ltd. / RevoWorks Browser	affected 2.2.100 and earlier 2 series versions; affected 3.0.1 and earlier 3 series versions

CWE

CWE-669

References

https://jscom.jp/news-20250217/
https://jvn.jp/en/jp/JVN91300609/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.