CveMateVulnerability intelligence

Sony Corporation vulnerabilities

19 vulnerabilities

Known vulnerabilities in Sony Corporation products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 24 products.

Products

24

WG C103 vulnerabilities
Optical Disc Archive Software For Windows2 vulnerabilities
SNC Cx600W2 vulnerabilities
VAIO Update2 vulnerabilities
Content Transfer (For Windows)1 vulnerabilities
Felica IC Chips1 vulnerabilities
Inzone Hub1 vulnerabilities
NFC Net Installer1 vulnerabilities
NFC Port Software (For RC S310, RC S320, RC S330, RC S370, RC S380, RC S380/S)1 vulnerabilities
NFC Port Software (For RC S320, RC S310/J1C, RC S310/Ed4C)1 vulnerabilities
NFC Port Software Remover1 vulnerabilities
PCS XC11 vulnerabilities
PCS Xg1001 vulnerabilities
PCS Xg100C1 vulnerabilities
PCS Xg100S1 vulnerabilities
PCS XG771 vulnerabilities
PCS Xg77C1 vulnerabilities
PCS Xg77S1 vulnerabilities
Pc/Sc Activator For Type B1 vulnerabilities
Sfcard Viewer 21 vulnerabilities
Sony Wireless Headphones WF 1000X, WF Sp700N, WH 1000Xm2, WH 1000Xm3, WH Ch700N, WH H900N, WH Xb700, WH Xb900N, WI 1000X, WI C600N, WI Sp600N1 vulnerabilities
The Installer Of Digital Paper App1 vulnerabilities
The Installer Of Playmemories Home For Windows1 vulnerabilities
The Installers Of Multiple Sony Products1 vulnerabilities

CVE-2018-0600sony corporationthe installer of playmemories home for windows+18y ago26-06-2018 14:00

Untrusted search path vulnerability in the installer of PlayMemories Home for Windows ver.5.5.01 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.CVE-2018-0656sony corporationthe installer of digital paper app+18y ago04-09-2018 13:00

Untrusted search path vulnerability in The installer of Digital Paper App version 1.4.0.16050 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.CVE-2021-20793sony corporationthe installers of multiple sony products+25y ago26-08-2021 01:20

Untrusted search path vulnerability in the installer of Sony Audio USB Driver V1.10 and prior and the installer of HAP Music Transfer Ver.1.3.0 and prior allows an attacker to gain privileges and execute arbitrary code via a Trojan horse DLL in an unspecified directory.CVE-2016-7830sony corporationpcs-xc1+99y ago09-06-2017 16:00

Sony PCS-XG100, PCS-XG100S, PCS-XG100C, PCS-XG77, PCS-XG77S, PCS-XG77C devices with firmware versions prior to Ver.1.51 and PCS-XC1 devices with firmware version prior to Ver.1.22 allow an attacker on the same network segment to bypass authentication to perform administrative operations via unspecified vectors.CVE-2025-62497sony corporationsnc-cx600w+111mo ago25-11-2025 04:37

Cross-site request forgery vulnerability exists in SNC-CX600W versions prior to Ver.2.8.0. If a user accesses a specially crafted webpage while logged in, unintended operations may be performed.CVE-2025-62225sony corporationoptical disc archive software for windows11mo ago05-11-2025 06:19

Optical Disc Archive Software provided by Sony Corporation registers a Windows service with an unquoted file path. A user with the write permission on the root directory of the system drive may execute arbitrary code with SYSTEM privilege.CVE-2025-64772sony corporationinzone hub10mo ago01-12-2025 00:22

The installer of INZONE Hub 1.0.10.3 to 1.0.17.0 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with the privilege of the user invoking the installer.CVE-2025-64730sony corporationsnc-cx600w11mo ago25-11-2025 04:37

Cross-site scripting vulnerability exists in SNC-CX600W all versions. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the product.CVE-2020-5589sony corporationsony wireless headphones wf-1000x, wf-sp700n, wh-1000xm2, wh-1000xm3, wh-ch700n, wh-h900n, wh-xb700, wh-xb900n, wi-1000x, wi-c600n, wi-sp600n+116y ago09-06-2020 08:00

SONY Wireless Headphones WF-1000X, WF-SP700N, WH-1000XM2, WH-1000XM3, WH-CH700N, WH-H900N, WH-XB700, WH-XB900N, WI-1000X, WI-C600N and WI-SP600N with firmware versions prior to 4.5.2 have vulnerability that someone within the Bluetooth range can make the Bluetooth pairing and operate such as changing volume of the product.CVE-2022-41796sony corporationcontent transfer (for windows)+13y ago24-10-2022 00:00

Untrusted search path vulnerability in the installer of Content Transfer (for Windows) Ver.1.3 and prior allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.CVE-2017-2286sony corporationnfc net installer+89y ago02-08-2017 16:00

Untrusted search path vulnerability in NFC Port Software Version 5.5.0.6 and earlier (for RC-S310, RC-S320, RC-S330, RC-S370, RC-S380, RC-S380/S), NFC Port Software Version 5.3.6.7 and earlier (for RC-S320, RC-S310/J1C, RC-S310/ED4C), PC/SC Activator for Type B Ver.1.2.1.0 and earlier, SFCard Viewer 2 Ver.2.5.0.0 and earlier, NFC Net Installer Ver.1.1.0.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.CVE-2017-2287sony corporationnfc port software remover+19y ago02-08-2017 16:00

Untrusted search path vulnerability in NFC Port Software remover Ver.1.3.0.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.CVE-2017-2276sony corporationwg-c10+19y ago22-07-2017 00:00

Buffer overflow in WG-C10 v3.0.79 and earlier allows an attacker to execute arbitrary commands via unspecified vectors.CVE-2017-2275sony corporationwg-c10+19y ago22-07-2017 00:00

WG-C10 v3.0.79 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors.CVE-2017-2277sony corporationwg-c10+19y ago22-07-2017 00:00

WG-C10 v3.0.79 and earlier allows an attacker to bypass access restrictions to obtain or alter information stored in the external storage connected to the product via unspecified vectors.CVE-2019-5981sony corporationvaio update+17y ago05-07-2019 13:20

Improper authorization vulnerability in VAIO Update 7.3.0.03150 and earlier allows an attackers to execute arbitrary executable file with administrative privilege via unspecified vectors.CVE-2019-5982sony corporationvaio update+17y ago05-07-2019 13:20

Improper download file verification vulnerability in VAIO Update 7.3.0.03150 and earlier allows remote attackers to conduct a man-in-the-middle attack via a malicous wireless LAN access point. A successful exploitation may result in a malicious file being downloaded/executed.CVE-2026-59776sony corporationfelica ic chips3mo ago21-07-2026 03:06

Missing Cryptographic Step (CWE-325) vulnerability exists in certain FeliCa IC chips shipped in or before 2017. If the vulnerability is exploited, information stored in the IC chip may be read or tampered with.CVE-2026-50255sony corporationoptical disc archive software for windows4mo ago16-06-2026 05:03

Incorrect default permissions issue exists in Optical Disc Archive Software for Windows 5.5.3 and earlier. If this vulnerability is exploited, arbitrary code may be executed with SYSTEM privileges.