CVE-2026-76137 — Yamaha Corporation / VOCALOID6

CVE-2026-76137

Yamaha Corporation / VOCALOID6 PUBLISHED

Description (CNA)

Missing authentication for critical function vulnerability exists in VOCALOID6. Any process running under the same local user account as a running VOCALOID6 Editor instance may escalate privileges via a local named pipe.

Affected (CNA)

Vendor / product	Versions
Yamaha Corporation / VOCALOID6	affected 0 through 6.13.1

CWE

CWE-306

References

https://www.vocaloid.com/en/support/download/
https://jvn.jp/en/vu/JVNVU90210212/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.