Sony Corporation
19 CVEs across 25 Sony Corporation products. Browse Sony Corporation vulnerabilities, severities, and proof-of-concept exploits.
Sony Corporation products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-59776 | Medium | 6.8 | 2026-07-21 | Missing Cryptographic Step (CWE-325) vulnerability exists in certain FeliCa IC chips shipped in or before 2017. If the vulnerability is exploited, information… |
CVE-2026-50255 | Medium | 6.7 | 2026-06-16 | Incorrect default permissions issue exists in Optical Disc Archive Software for Windows 5.5.3 and earlier. If this vulnerability is exploited, arbitrary code m… |
CVE-2025-64772 | High | 7.8 | 2025-12-01 | The installer of INZONE Hub 1.0.10.3 to 1.0.17.0 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a… |
CVE-2025-64730 | Medium | 6.1 | 2025-11-25 | Cross-site scripting vulnerability exists in SNC-CX600W all versions. If this vulnerability is exploited, an arbitrary script may be executed on the web browse… |
CVE-2025-62497 | Medium | 6.5 | 2025-11-25 | Cross-site request forgery vulnerability exists in SNC-CX600W versions prior to Ver.2.8.0. If a user accesses a specially crafted webpage while logged in, unin… |
CVE-2025-62225 | Medium | 6.7 | 2025-11-05 | Optical Disc Archive Software provided by Sony Corporation registers a Windows service with an unquoted file path. A user with the write permission on the root… |
CVE-2022-41796 | High | 7.8 | 2022-10-24 | Untrusted search path vulnerability in the installer of Content Transfer (for Windows) Ver.1.3 and prior allows an attacker to gain privileges via a Trojan hor… |
CVE-2021-20793 | High | 7.8 | 2021-08-26 | Untrusted search path vulnerability in the installer of Sony Audio USB Driver V1.10 and prior and the installer of HAP Music Transfer Ver.1.3.0 and prior allow… |
CVE-2020-5589 | High | 8.8 | 2020-06-09 | SONY Wireless Headphones WF-1000X, WF-SP700N, WH-1000XM2, WH-1000XM3, WH-CH700N, WH-H900N, WH-XB700, WH-XB900N, WI-1000X, WI-C600N and WI-SP600N with firmware… |
CVE-2019-5982 | High | 7.5 | 2019-07-05 | Improper download file verification vulnerability in VAIO Update 7.3.0.03150 and earlier allows remote attackers to conduct a man-in-the-middle attack via a ma… |
CVE-2019-5981 | High | 7.8 | 2019-07-05 | Improper authorization vulnerability in VAIO Update 7.3.0.03150 and earlier allows an attackers to execute arbitrary executable file with administrative privil… |
CVE-2018-0656 | High | 7.8 | 2018-09-04 | Untrusted search path vulnerability in The installer of Digital Paper App version 1.4.0.16050 and earlier allows an attacker to gain privileges via a Trojan ho… |
CVE-2018-0600 | High | 7.8 | 2018-06-26 | Untrusted search path vulnerability in the installer of PlayMemories Home for Windows ver.5.5.01 and earlier allows an attacker to gain privileges via a Trojan… |
CVE-2017-2287 | High | 7.8 | 2017-08-02 | Untrusted search path vulnerability in NFC Port Software remover Ver.1.3.0.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an uns… |
CVE-2017-2286 | High | 7.8 | 2017-08-02 | Untrusted search path vulnerability in NFC Port Software Version 5.5.0.6 and earlier (for RC-S310, RC-S320, RC-S330, RC-S370, RC-S380, RC-S380/S), NFC Port Sof… |
CVE-2017-2277 | Critical | 9.1 | 2017-07-22 | WG-C10 v3.0.79 and earlier allows an attacker to bypass access restrictions to obtain or alter information stored in the external storage connected to the prod… |
CVE-2017-2276 | High | 7.2 | 2017-07-22 | Buffer overflow in WG-C10 v3.0.79 and earlier allows an attacker to execute arbitrary commands via unspecified vectors. |
CVE-2017-2275 | High | 7.2 | 2017-07-22 | WG-C10 v3.0.79 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors. |
CVE-2016-7830 | High | 8.8 | 2017-06-09 | Sony PCS-XG100, PCS-XG100S, PCS-XG100C, PCS-XG77, PCS-XG77S, PCS-XG77C devices with firmware versions prior to Ver.1.51 and PCS-XC1 devices with firmware versi… |