MEDIUM 6.9 NVD
CVE-2026-104679
VOCALOID6 Editor provided by Yamaha Corporation improperly restricts XML external entity references. Loading a specially crafted project file may the product to
VOCALOID6 Editor provided by Yamaha Corporation improperly restricts XML external entity references. Loading a specially crafted project file may the product to initiate unintended communication, potentially leading to the leak of sensitive information from the device where the product is installed or resulting in a denial-of-service (DoS) condition.
References
- https://jvn.jp/en/vu/JVNVU93520490/
- https://www.vocaloid.com/en/news/support_64/
- https://www.vocaloid.com/news/support_64/
This medium severity vulnerability with a CVSS score of 6.9 was published on 2026-10-19 via NVD.
vulnfeed aggregates 17512 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.