Skip to content
OpenAdvisories

Vendor

Sony

41 known vulnerabilities.

Products

XAV-9500ES 7 XAV-AX8500 6 XAV-AX5500 4 WG-C10 3 Optical Disc Archive Software for Windows 2 SNC-CX600W 2 VAIO Update 2 Neural Network Libraries 2 PS4 2 NFC Port Software (for RC-S310, RC-S320, RC-S330, RC-S370, RC-S380, RC-S380/S) 1 NFC Port Software (for RC-S320, RC-S310/J1C, RC-S310/ED4C) 1 PC/SC Activator for Type B 1 SFCard Viewer 2 1 NFC Net Installer 1 The installers of multiple Sony products 1 Content Transfer (for Windows) 1 INZONE Hub 1 NFC Port Software remover 1 PCS-XG100 1 PCS-XG100S 1 PS5 1 PCS-XG100C 1 PCS-XG77 1 PCS-XG77S 1 PCS-XG77C 1 PCS-XC1 1 The installer of Digital Paper App 1 FeliCa IC chips 1 Sony wireless headphones WF-1000X, WF-SP700N, WH-1000XM2, WH-1000XM3, WH-CH700N, WH-H900N, WH-XB700, WH-XB900N, WI-1000X, WI-C600N, WI-SP600N 1 the installer of PlayMemories Home for Windows 1 SNC-M1 1 SNC-M3 1 SNC-RZ25N 1 SNC-RZ30N 1 SNC-DS10 1 SNC-CS3N 1 SNC-RX570N 1
All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

  • High 7.8
    CVE-2026-18284

    Sony XAV-9500ES Crash Dump Handler Command Injection Local Privilege Escalation Vulnerability

    Sony XAV-9500ES Crash Dump Handler Command Injection Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Sony XAV-9500ES devices. An attacker must first obtain the ability to …

    Sony XAV-9500ES
  • High 8.0
    CVE-2026-18282

    Sony XAV-9500ES AVRCP_Br_Response_Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability

    Sony XAV-9500ES AVRCP_Br_Response_Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sony XAV-9500ES devices. An attacker must firs…

    Sony XAV-9500ES
  • High 8.0
    CVE-2026-18281

    Sony XAV-9500ES l2_reassemble_sdu Heap-based Buffer Overflow Remote Code Execution Vulnerability

    Sony XAV-9500ES l2_reassemble_sdu Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sony XAV-9500ES devices. An attacker must first obtai…

    Sony XAV-9500ES
  • High 8.8
    CVE-2026-18279

    Sony XAV-9500ES RTSP SETUP Buffer Overflow Remote Code Execution Vulnerability

    Sony XAV-9500ES RTSP SETUP Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sony XAV-9500ES devices. Authentication is not required to exploit this…

    Sony XAV-9500ES
  • High 7.4
    CVE-2025-64390

    A privilege escalation vulnerability exists in PlayStation 4 firmware versions 13.00 through 13.02. The BD-J (Blu-ray D…

    Sony PS4
  • High 7.8
    CVE-2025-64772

    The installer of INZONE Hub 1.0.10.3 to 1.0.17.0 contains an issue with the DLL search path, which may lead to insecure…

    Sony INZONE Hub
  • High 7.5
    CVE-2025-5475

    Sony XAV-AX8500 Bluetooth Packet Handling Integer Overflow Remote Code Execution Vulnerability

    Sony XAV-AX8500 Bluetooth Packet Handling Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Sony XAV-AX8500 devices. An attacker must first obtain the ability to pa…

    Sony XAV-AX8500
  • High 7.5
    CVE-2025-5477

    Sony XAV-AX8500 Bluetooth L2CAP Protocol Heap-based Buffer Overflow Remote Code Execution Vulnerability

    Sony XAV-AX8500 Bluetooth L2CAP Protocol Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Sony XAV-AX8500 devices. An attacker must first obtain the abil…

    Sony XAV-AX8500
  • High 8.8
    CVE-2025-5478

    Sony XAV-AX8500 Bluetooth SDP Protocol Integer Overflow Remote Code Execution Vulnerability

    Sony XAV-AX8500 Bluetooth SDP Protocol Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sony XAV-AX8500 devices. Authentication is not required to…

    Sony XAV-AX8500
  • High 7.5
    CVE-2025-5479

    Sony XAV-AX8500 Bluetooth AVCTP Protocol Heap-based Buffer Overflow Remote Code Execution Vulnerability

    Sony XAV-AX8500 Bluetooth AVCTP Protocol Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sony XAV-AX8500 devices. An attacker must firs…

    Sony XAV-AX8500
  • High 8.1
    CVE-2025-5124

    Sony SNC-M1 Administrative Interface default credentials

    A vulnerability classified as critical has been found in Sony SNC-M1, SNC-M3, SNC-RZ25N, SNC-RZ30N, SNC-DS10, SNC-CS3N and SNC-RX570N up to 1.30. This affects an unknown part of the component Administrative Interface. The manipulation leads to use of default …

    Sony SNC-M3 SNC-RZ30N SNC-CS3N
  • High 8.8
    CVE-2024-23934

    Sony XAV-AX5500 WMV/ASF Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

    Sony XAV-AX5500 WMV/ASF Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sony XAV-AX5500 devices. User interaction is required to exploit…

    Sony XAV-AX5500
  • High 7.8
    CVE-2022-41796

    Untrusted search path vulnerability in the installer of Content Transfer (for Windows) Ver.1.3 and prior allows an atta…

    Sony Content Transfer (for Windows) Windows