Sony Corporation
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Optical Disc Archive Software (for Windows) | 2 | – | Jun 16, 2026 |
| SNC-CX600W | 2 | – | Nov 25, 2025 |
| INZONE Hub | 1 | – | Dec 1, 2025 |
| Content Transfer (for Windows) | 1 | – | Oct 24, 2022 |
| The installers of multiple Sony products | 1 | – | Aug 26, 2021 |
| Sony wireless headphones WF-1000X, WF-SP700N, WH-1000XM2, WH-1000XM3, WH-CH700N, WH-H900N, WH-XB700, WH-XB900N, WI-1000X, WI-C600N, WI-SP600N | 1 | – | Jun 9, 2020 |
| FeliCa IC chips | 1 | – | Jul 21, 2026 |
Exploited and recent CVEs
- CVE-2026-59776 Missing Cryptographic Step (CWE-325) vulnerability exists in certain FeliCa IC chips shipped in or before 2017. If the vulnerability is exploited, information stored in the IC chip may be read or tamp 0.2%
- CVE-2026-50255 Incorrect default permissions issue exists in Optical Disc Archive Software for Windows 5.5.3 and earlier. If this vulnerability is exploited, arbitrary code may be executed with SYSTEM privileges. <0.1%
- CVE-2025-64772 The installer of INZONE Hub 1.0.10.3 to 1.0.17.0 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed wi 0.2%
- CVE-2025-64730 Cross-site scripting vulnerability exists in SNC-CX600W all versions. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the product. 0.2%
- CVE-2025-62497 Cross-site request forgery vulnerability exists in SNC-CX600W versions prior to Ver.2.8.0. If a user accesses a specially crafted webpage while logged in, unintended operations may be performed. 0.1%
- CVE-2025-62225 Optical Disc Archive Software provided by Sony Corporation registers a Windows service with an unquoted file path. A user with the write permission on the root directory of the system drive may execut 0.2%
- CVE-2022-41796 Untrusted search path vulnerability in the installer of Content Transfer (for Windows) Ver.1.3 and prior allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. 0.2%
- CVE-2021-20793 Untrusted search path vulnerability in the installer of Sony Audio USB Driver V1.10 and prior and the installer of HAP Music Transfer Ver.1.3.0 and prior allows an attacker to gain privileges and exec 0.3%
- CVE-2020-5589 SONY Wireless Headphones WF-1000X, WF-SP700N, WH-1000XM2, WH-1000XM3, WH-CH700N, WH-H900N, WH-XB700, WH-XB900N, WI-1000X, WI-C600N and WI-SP600N with firmware versions prior to 4.5.2 have vulnerabilit 0.6%