Skip to content
OpenAdvisories

Vendor

Sony

41 known vulnerabilities.

Sony at a glance

Last 12 months
15
Critical · all time
0
Exploited · all time
0
Public exploit · all time
1
New vulnerabilities per month · last 12 months
0 5 10 December 2025: 1 vulnerability Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 2 vulnerabilities Jun July 2026: 1 vulnerability August 2026: 7 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 2 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202620
Sep 202600
Aug 202670
Jul 202610
Jun 202620
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202510
Nov 202530
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202560
May 202510
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Products

XAV-9500ES 7 XAV-AX8500 6 XAV-AX5500 4 WG-C10 3 Optical Disc Archive Software for Windows 2 SNC-CX600W 2 VAIO Update 2 Neural Network Libraries 2 PS4 2 NFC Port Software (for RC-S310, RC-S320, RC-S330, RC-S370, RC-S380, RC-S380/S) 1 NFC Port Software (for RC-S320, RC-S310/J1C, RC-S310/ED4C) 1 PC/SC Activator for Type B 1 SFCard Viewer 2 1 NFC Net Installer 1 The installers of multiple Sony products 1 Content Transfer (for Windows) 1 INZONE Hub 1 NFC Port Software remover 1 PCS-XG100 1 PCS-XG100S 1 PS5 1 PCS-XG100C 1 PCS-XG77 1 PCS-XG77S 1 PCS-XG77C 1 PCS-XC1 1 The installer of Digital Paper App 1 FeliCa IC chips 1 Sony wireless headphones WF-1000X, WF-SP700N, WH-1000XM2, WH-1000XM3, WH-CH700N, WH-H900N, WH-XB700, WH-XB900N, WI-1000X, WI-C600N, WI-SP600N 1 the installer of PlayMemories Home for Windows 1 SNC-M1 1 SNC-M3 1 SNC-RZ25N 1 SNC-RZ30N 1 SNC-DS10 1 SNC-CS3N 1 SNC-RX570N 1
All Critical High Medium Low Exploited only Public exploit

41 results · Feed

  • Medium 6.3
    CVE-2026-116104

    Sony Neural Network Libraries NNP Converter utils.py func_set_nnabla_version_decorate code injection

    A security flaw has been discovered in Sony Neural Network Libraries up to 1.39.0. This impacts the function func_set_nnabla_version_decorate of the file python/src/nnabla/utils/converter/utils.py of the component NNP Converter. Performing a manipulation of t…

    Sony Neural Network Libraries
  • Medium 6.3
    CVE-2026-116103

    Sony Neural Network Libraries Encode Param encode_decode_param.py load_param_in_txt code injection

    A vulnerability was identified in Sony Neural Network Libraries up to 1.39.0. This affects the function load_param_in_txt of the file python/src/nnabla/utils/cli/encode_decode_param.py of the component Encode Param Command Handler. Such manipulation leads to …

    Sony Neural Network Libraries
  • High 7.8
    CVE-2026-18284

    Sony XAV-9500ES Crash Dump Handler Command Injection Local Privilege Escalation Vulnerability

    Sony XAV-9500ES Crash Dump Handler Command Injection Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Sony XAV-9500ES devices. An attacker must first obtain the ability to …

    Sony XAV-9500ES
  • Low 2.4
    CVE-2026-18283

    Sony XAV-9500ES udev USB Rules Authorization Bypass Vulnerability

    Sony XAV-9500ES udev USB Rules Authorization Bypass Vulnerability. This vulnerability allows physically present attackers to bypass authorization on affected installations on Sony XAV-9500ES devices. Authentication is not required to exploit this vulnerabilit…

    Sony XAV-9500ES
  • High 8.0
    CVE-2026-18282

    Sony XAV-9500ES AVRCP_Br_Response_Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability

    Sony XAV-9500ES AVRCP_Br_Response_Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sony XAV-9500ES devices. An attacker must firs…

    Sony XAV-9500ES
  • High 8.0
    CVE-2026-18281

    Sony XAV-9500ES l2_reassemble_sdu Heap-based Buffer Overflow Remote Code Execution Vulnerability

    Sony XAV-9500ES l2_reassemble_sdu Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sony XAV-9500ES devices. An attacker must first obtai…

    Sony XAV-9500ES
  • Low 3.9
    CVE-2026-18280

    Sony XAV-9500ES gpsd Buffer Overflow Arbitrary Code Execution Vulnerability

    Sony XAV-9500ES gpsd Buffer Overflow Arbitrary Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Sony XAV-9500ES devices. Authentication is not required to exploit this …

    Sony XAV-9500ES
  • High 8.8
    CVE-2026-18279

    Sony XAV-9500ES RTSP SETUP Buffer Overflow Remote Code Execution Vulnerability

    Sony XAV-9500ES RTSP SETUP Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sony XAV-9500ES devices. Authentication is not required to exploit this…

    Sony XAV-9500ES
  • Low 3.5
    CVE-2026-18278

    Sony XAV-9500ES prh_l2_decode_packet Out-Of-Bounds Read Information Disclosure Vulnerability

    Sony XAV-9500ES prh_l2_decode_packet Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Sony XAV-9500ES devices. An attacker must first o…

    Sony XAV-9500ES
  • Medium 6.8
    CVE-2026-59776

    Missing Cryptographic Step (CWE-325) vulnerability exists in certain FeliCa IC chips shipped in or before 2017. If the …

    Sony FeliCa IC chips
  • Medium 6.7
    CVE-2026-50255

    Incorrect default permissions issue exists in Optical Disc Archive Software for Windows 5.5.3 and earlier. If this vuln…

    Sony Optical Disc Archive Software for Windows Windows
  • High 7.4
    CVE-2025-64390

    A privilege escalation vulnerability exists in PlayStation 4 firmware versions 13.00 through 13.02. The BD-J (Blu-ray D…

    Sony PS4
  • High 7.8
    CVE-2025-64772

    The installer of INZONE Hub 1.0.10.3 to 1.0.17.0 contains an issue with the DLL search path, which may lead to insecure…

    Sony INZONE Hub
  • Medium 5.2
    CVE-2025-64730

    Cross-site scripting vulnerability exists in SNC-CX600W all versions. If this vulnerability is exploited, an arbitrary …

    Sony SNC-CX600W
  • Low 3.1
    CVE-2025-62497

    Cross-site request forgery vulnerability exists in SNC-CX600W versions prior to Ver.2.8.0. If a user accesses a special…

    Sony SNC-CX600W
  • Medium 6.7
    CVE-2025-62225

    Optical Disc Archive Software provided by Sony Corporation registers a Windows service with an unquoted file path. A us…

    Sony Optical Disc Archive Software for Windows Windows
  • High 7.5
    CVE-2025-5475

    Sony XAV-AX8500 Bluetooth Packet Handling Integer Overflow Remote Code Execution Vulnerability

    Sony XAV-AX8500 Bluetooth Packet Handling Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Sony XAV-AX8500 devices. An attacker must first obtain the ability to pa…

    Sony XAV-AX8500
  • High 7.5
    CVE-2025-5477

    Sony XAV-AX8500 Bluetooth L2CAP Protocol Heap-based Buffer Overflow Remote Code Execution Vulnerability

    Sony XAV-AX8500 Bluetooth L2CAP Protocol Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Sony XAV-AX8500 devices. An attacker must first obtain the abil…

    Sony XAV-AX8500
  • High 8.8
    CVE-2025-5478

    Sony XAV-AX8500 Bluetooth SDP Protocol Integer Overflow Remote Code Execution Vulnerability

    Sony XAV-AX8500 Bluetooth SDP Protocol Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sony XAV-AX8500 devices. Authentication is not required to…

    Sony XAV-AX8500
  • High 7.5
    CVE-2025-5479

    Sony XAV-AX8500 Bluetooth AVCTP Protocol Heap-based Buffer Overflow Remote Code Execution Vulnerability

    Sony XAV-AX8500 Bluetooth AVCTP Protocol Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sony XAV-AX8500 devices. An attacker must firs…

    Sony XAV-AX8500
  • Medium 6.3
    CVE-2025-5476

    Sony XAV-AX8500 Bluetooth Improper Isolation Authentication Bypass Vulnerability

    Sony XAV-AX8500 Bluetooth Improper Isolation Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected Sony XAV-AX8500 devices. Authentication is not required to exploit this vulnerability. …

    Sony XAV-AX8500
  • Medium 6.3
    CVE-2025-5820

    Sony XAV-AX8500 Bluetooth ERTM Channel Authentication Bypass Vulnerability

    Sony XAV-AX8500 Bluetooth ERTM Channel Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected Sony XAV-AX8500 devices. Authentication is not required to exploit this vulnerability. The sp…

    Sony XAV-AX8500
  • High 8.1
    CVE-2025-5124

    Sony SNC-M1 Administrative Interface default credentials

    A vulnerability classified as critical has been found in Sony SNC-M1, SNC-M3, SNC-RZ25N, SNC-RZ30N, SNC-DS10, SNC-CS3N and SNC-RX570N up to 1.30. This affects an unknown part of the component Administrative Interface. The manipulation leads to use of default …

    Sony SNC-M1 SNC-RZ25N SNC-DS10
  • Medium 6.8
    CVE-2024-23922 Public exploit

    Sony XAV-AX5500 Insufficient Firmware Update Validation Remote Code Execution Vulnerability

    Sony XAV-AX5500 Insufficient Firmware Update Validation Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Sony XAV-AX5500 devices. Authentication is not required …

    Sony XAV-AX5500
  • Medium 6.8
    CVE-2024-23972

    Sony XAV-AX5500 USB Configuration Descriptor Buffer Overflow Remote Code Execution Vulnerability

    Sony XAV-AX5500 USB Configuration Descriptor Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Sony XAV-AX5500 devices. Authentication is not requ…

    Sony XAV-AX5500
  • High 8.8
    CVE-2024-23934

    Sony XAV-AX5500 WMV/ASF Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

    Sony XAV-AX5500 WMV/ASF Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sony XAV-AX5500 devices. User interaction is required to exploit…

    Sony XAV-AX5500
  • Medium 6.8
    CVE-2024-23933

    Sony XAV-AX5500 CarPlay TLV Stack-based Buffer Overflow Remote Code Execution Vulnerability

    Sony XAV-AX5500 CarPlay TLV Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Sony XAV-AX5500 devices. Authentication is not required …

    Sony XAV-AX5500
  • High 7.8
    CVE-2022-41796

    Untrusted search path vulnerability in the installer of Content Transfer (for Windows) Ver.1.3 and prior allows an atta…

    Sony Content Transfer (for Windows) Windows
  • Medium 6.8
    CVE-2022-3349

    Sony PS4/PS5 exFAT UVFAT_readupcasetable heap-based overflow

    A vulnerability was found in Sony PS4 and PS5. It has been classified as critical. This affects the function UVFAT_readupcasetable of the component exFAT Handler. The manipulation of the argument dataLength leads to heap-based buffer overflow. It is possible …

    Sony PS4 PS5
  • Unscored —
    CVE-2021-20793

    Untrusted search path vulnerability in the installer of Sony Audio USB Driver V1.10 and prior and the installer of HAP …

    Sony The installers of multiple Sony products
  • Unscored —
    CVE-2020-5589

    SONY Wireless Headphones WF-1000X, WF-SP700N, WH-1000XM2, WH-1000XM3, WH-CH700N, WH-H900N, WH-XB700, WH-XB900N, WI-1000…

    Sony Sony wireless headphones WF-1000X, WF-SP700N, WH-1000XM2, WH-1000XM3, WH-CH700N, WH-H900N, WH-XB700, WH-XB900N, WI-1000X, WI-C600N, WI-SP600N
  • Unscored —
    CVE-2019-5982

    Improper download file verification vulnerability in VAIO Update 7.3.0.03150 and earlier allows remote attackers to con…

    Sony VAIO Update
  • Unscored —
    CVE-2019-5981

    Improper authorization vulnerability in VAIO Update 7.3.0.03150 and earlier allows an attackers to execute arbitrary ex…

    Sony VAIO Update
  • Unscored —
    CVE-2018-0656

    Untrusted search path vulnerability in The installer of Digital Paper App version 1.4.0.16050 and earlier allows an att…

    Sony The installer of Digital Paper App
  • Unscored —
    CVE-2018-0600

    Untrusted search path vulnerability in the installer of PlayMemories Home for Windows ver.5.5.01 and earlier allows an …

    Sony the installer of PlayMemories Home for Windows Windows
  • Unscored —
    CVE-2017-2286

    Untrusted search path vulnerability in NFC Port Software Version 5.5.0.6 and earlier (for RC-S310, RC-S320, RC-S330, RC…

    Sony NFC Net Installer NFC Port Software (for RC-S320, RC-S310/J1C, RC-S310/ED4C) SFCard Viewer 2
  • Unscored —
    CVE-2017-2287

    Untrusted search path vulnerability in NFC Port Software remover Ver.1.3.0.1 and earlier allows an attacker to gain pri…

    Sony NFC Port Software remover
  • Unscored —
    CVE-2017-2276

    Buffer overflow in WG-C10 v3.0.79 and earlier allows an attacker to execute arbitrary commands via unspecified vectors.

    Sony WG-C10
  • Unscored —
    CVE-2017-2277

    WG-C10 v3.0.79 and earlier allows an attacker to bypass access restrictions to obtain or alter information stored in th…

    Sony WG-C10
  • Unscored —
    CVE-2017-2275

    WG-C10 v3.0.79 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors.

    Sony WG-C10