SO
Vendor
Sony
167
CVEs
0
On KEV
2
New 30D
Products
NN9.8
Neural Network Libraries
Sony
3 CVEs0 on KEV2 new
XA8.8
XAV-9500ES
Sony
7 CVEs0 on KEV0 new
XF8.8
Xav-ax8500 Firmware
Sony
6 CVEs0 on KEV0 new
BS9.8
Bravia Signage
Sony
3 CVEs0 on KEV0 new
PP–
Playstation Portable
Sony
3 CVEs0 on KEV0 new
RF8.8
R5c Firmware
Sony
3 CVEs0 on KEV0 new
WF8.8
Wd65 Firmware
Sony
3 CVEs0 on KEV0 new
WF8.8
Wd75 Firmware
Sony
3 CVEs0 on KEV0 new
WF8.8
We6 Firmware
Sony
3 CVEs0 on KEV0 new
WF8.8
We75 Firmware
Sony
3 CVEs0 on KEV0 new
WF8.8
Wf6 Firmware
Sony
3 CVEs0 on KEV0 new
WF9.1
Wg-c10 Firmware
Sony
3 CVEs0 on KEV0 new
XF8.8
Xe70 Firmware
Sony
3 CVEs0 on KEV0 new
XF8.8
Xf70 Firmware
Sony
3 CVEs0 on KEV0 new
BF7.5
Bravia Firmware
Sony
2 CVEs0 on KEV0 new
MC7.8
Music Center
Sony
2 CVEs0 on KEV0 new
PS8.1
Photo Sharing Plus
Sony
2 CVEs0 on KEV0 new
PH7.8
Playmemories Home
Sony
2 CVEs0 on KEV0 new
P37.5
Playstation 3
Sony
2 CVEs0 on KEV0 new
SF6.5
Snc-cx600w Firmware
Sony
2 CVEs0 on KEV0 new
SF10.0
Snc-eb600 Firmware
Sony
2 CVEs0 on KEV0 new
SF10.0
Snc-eb600b Firmware
Sony
2 CVEs0 on KEV0 new
SF10.0
Snc-eb602r Firmware
Sony
2 CVEs0 on KEV0 new
SF10.0
Snc-eb630 Firmware
Sony
2 CVEs0 on KEV0 new
SF10.0
Snc-eb630b Firmware
Sony
2 CVEs0 on KEV0 new
SF10.0
Snc-eb632r Firmware
Sony
2 CVEs0 on KEV0 new
SF10.0
Snc-em600 Firmware
Sony
2 CVEs0 on KEV0 new
SF10.0
Snc-em601 Firmware
Sony
2 CVEs0 on KEV0 new
SF10.0
Snc-em602r Firmware
Sony
2 CVEs0 on KEV0 new
SF10.0
Snc-em602rc Firmware
Sony
2 CVEs0 on KEV0 new
SF10.0
Snc-em630 Firmware
Sony
2 CVEs0 on KEV0 new
SF10.0
Snc-em631 Firmware
Sony
2 CVEs0 on KEV0 new
SF10.0
Snc-em632r Firmware
Sony
2 CVEs0 on KEV0 new
SF10.0
Snc-em632rc Firmware
Sony
2 CVEs0 on KEV0 new
VM–
Vaio Media Server
Sony
2 CVEs0 on KEV0 new
VU7.8
Vaio Update
Sony
2 CVEs0 on KEV0 new
XF6.8
Xav-ax5500 Firmware
Sony
2 CVEs0 on KEV0 new
XX7.8
Xperia Xzs Firmware
Sony
2 CVEs0 on KEV0 new
AU7.8
Audio Usb Driver
Sony
1 CVEs0 on KEV0 new
AA–
Axruploadserver Activex Control
Sony
1 CVEs0 on KEV0 new
BT–
Bravia TV
Sony
1 CVEs0 on KEV0 new
CB7.8
Catalyst Browse
Sony
1 CVEs0 on KEV0 new
CP7.8
Catalyst Production Suite
Sony
1 CVEs0 on KEV0 new
CM7.8
Content Manager Assistant
Sony
1 CVEs0 on KEV0 new
CT7.8
Content Transfer
Sony
1 CVEs0 on KEV0 new
DP7.8
Digital Paper App
Sony
1 CVEs0 on KEV0 new
DA–
Dvd Architect Pro
Sony
1 CVEs0 on KEV0 new
DA–
Dvd Architect Studio
Sony
1 CVEs0 on KEV0 new
FX–
First4internet Xcp Content Management
Sony
1 CVEs0 on KEV0 new
HM7.8
Hap Music Transfer
Sony
1 CVEs0 on KEV0 new
IM–
Imagestation
Sony
1 CVEs0 on KEV0 new
MG7.8
Media GO
Sony
1 CVEs0 on KEV0 new
MV–
Micro Vault Fingerprint Access Software
Sony
1 CVEs0 on KEV0 new
MH–
Moviez HD
Sony
1 CVEs0 on KEV0 new
MC7.5
Music Center For PC
Sony
1 CVEs0 on KEV0 new
MC–
Mylo Com 2
Sony
1 CVEs0 on KEV0 new
NN7.8
Nfc Net Installer
Sony
1 CVEs0 on KEV0 new
NP7.8
Nfc Port Firmware
Sony
1 CVEs0 on KEV0 new
NP7.8
Nfc Port Software Remover
Sony
1 CVEs0 on KEV0 new
PF–
P900 Firmware
Sony
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-116104 New | NN Neural Network Libraries Sony | 6.3 | Oct 26 | Sony Neural Network Libraries NNP Converter utils.py func_set_nnabla_version_decorate code injection |
| CVE-2026-116103 New | NN Neural Network Libraries Sony | 6.3 | Oct 26 | Sony Neural Network Libraries Encode Param encode_decode_param.py load_param_in_txt code injection |
| CVE-2026-18284 | XA XAV-9500ES Sony | 7.8 | Aug 20 | Sony XAV-9500ES Crash Dump Handler Command Injection Local Privilege Escalation Vulnerability |
| CVE-2026-18283 | XA XAV-9500ES Sony | 2.4 | Aug 20 | Sony XAV-9500ES udev USB Rules Authorization Bypass Vulnerability |
| CVE-2026-18282 | XA XAV-9500ES Sony | 8.0 | Aug 20 | Sony XAV-9500ES AVRCP_Br_Response_Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability |
| CVE-2026-18281 | XA XAV-9500ES Sony | 8.0 | Aug 20 | Sony XAV-9500ES l2_reassemble_sdu Heap-based Buffer Overflow Remote Code Execution Vulnerability |
| CVE-2026-18280 | XA XAV-9500ES Sony | 3.9 | Aug 20 | Sony XAV-9500ES gpsd Buffer Overflow Arbitrary Code Execution Vulnerability |
| CVE-2026-18279 | XA XAV-9500ES Sony | 8.8 | Aug 20 | Sony XAV-9500ES RTSP SETUP Buffer Overflow Remote Code Execution Vulnerability |
| CVE-2026-18278 | XA XAV-9500ES Sony | 3.5 | Aug 20 | Sony XAV-9500ES prh_l2_decode_packet Out-Of-Bounds Read Information Disclosure Vulnerability |
| CVE-2025-64390 | PS PS4 Sony | 7.4 | Jun 2 | A privilege escalation vulnerability exists in PlayStation 4 firmware versions 13.00 through 13.02 |
| CVE-2020-36924 | BS Bravia Signage Sony | 6.1 | Jan 6 | Sony BRAVIA Digital Signage 1.7.8 Unauthenticated Remote File Inclusion |
| CVE-2020-36923 | BS Bravia Signage Sony | 9.8 | Jan 6 | Sony BRAVIA Digital Signage 1.7.8 Client-Side Protection Bypass via IDOR |
| CVE-2020-36922 | BS Bravia Signage Sony | 7.5 | Jan 6 | Sony BRAVIA Digital Signage 1.7.8 Unauthenticated System API Information Disclosure |
| CVE-2020-36885 | SF Snc-dh120t Firmware Sony | 9.8 | Dec 10 | Sony IPELA Network Camera 1.82.01 Remote Stack Buffer Overflow via ftpclient.cgi |
| CVE-2025-64730 | SF Snc-cx600w Firmware Sony | 6.1 | Nov 25 | Cross-site scripting vulnerability exists in SNC-CX600W all versions |
| CVE-2025-62497 | SF Snc-cx600w Firmware Sony | 6.5 | Nov 25 | Cross-site request forgery vulnerability exists in SNC-CX600W versions prior to Ver.2.8.0 |
| CVE-2025-5820 | XF Xav-ax8500 Firmware Sony | 8.8 | Jun 21 | Sony XAV-AX8500 Bluetooth ERTM Channel Authentication Bypass Vulnerability |
| CVE-2025-5479 | XF Xav-ax8500 Firmware Sony | 7.5 | Jun 21 | Sony XAV-AX8500 Bluetooth AVCTP Protocol Heap-based Buffer Overflow Remote Code Execution Vulnerability |
| CVE-2025-5478 | XF Xav-ax8500 Firmware Sony | 8.8 | Jun 21 | Sony XAV-AX8500 Bluetooth SDP Protocol Integer Overflow Remote Code Execution Vulnerability |
| CVE-2025-5477 | XF Xav-ax8500 Firmware Sony | 7.5 | Jun 21 | Sony XAV-AX8500 Bluetooth L2CAP Protocol Heap-based Buffer Overflow Remote Code Execution Vulnerability |
| CVE-2025-5476 | XF Xav-ax8500 Firmware Sony | 8.8 | Jun 21 | Sony XAV-AX8500 Bluetooth Improper Isolation Authentication Bypass Vulnerability |
| CVE-2025-5475 | XF Xav-ax8500 Firmware Sony | 7.5 | Jun 21 | Sony XAV-AX8500 Bluetooth Packet Handling Integer Overflow Remote Code Execution Vulnerability |
| CVE-2024-23972 | XF Xav-ax5500 Firmware Sony | 6.8 | Sep 23 | Sony XAV-AX5500 USB Configuration Descriptor Buffer Overflow Remote Code Execution Vulnerability |
| CVE-2024-23922 | XF Xav-ax5500 Firmware Sony | 6.8 | Sep 23 | Sony XAV-AX5500 Insufficient Firmware Update Validation Remote Code Execution Vulnerability |
| CVE-2022-41796 | CT Content Transfer Sony | 7.8 | Oct 24 | Untrusted search path vulnerability in the installer of Content Transfer (for Windows) Ver.1.3 and prior allows an attacker to gain privileges via a Trojan horse DLL in an… |
| CVE-2022-3349 | P4 Playstation 4 Firmware Sony | 6.8 | Sep 28 | A vulnerability was found in Sony PS4 and PS5 |
| CVE-2022-23747 | X1 Xperia 1 Firmware Sony | 9.8 | Aug 17 | In Sony Xperia series 1, 5, and Pro, an out of bound memory access can occur due to lack of validation of the number of frames being passed during music playback |
| CVE-2022-27094 | PH Playmemories Home Sony | 6.7 | May 20 | Sony PlayMemories Home v6.0 contains an unquoted service path which allows attackers to escalate privileges to the system level |
| CVE-2021-20793 | AU Audio Usb Driver Sony | 7.8 | Aug 26 | Untrusted search path vulnerability in the installer of Sony Audio USB Driver V1.10 and prior and the installer of HAP Music Transfer Ver.1.3.0 and prior allows an attacker to… |
| CVE-2021-38544 | SF Srs-xb33 Firmware Sony | 5.9 | Aug 11 | Sony SRS-XB33 and SRS-XB43 devices through 2021-08-09 allow remote attackers to recover speech signals from an LED on the device, via a telescope and an electro-optical sensor,… |
| CVE-2020-5589 | WF Wh-ch700n Firmware Sony | 8.8 | Jun 9 | SONY Wireless Headphones WF-1000X, WF-SP700N, WH-1000XM2, WH-1000XM3, WH-CH700N, WH-H900N, WH-XB700, WH-XB900N, WI-1000X, WI-C600N and WI-SP600N with firmware versions prior to… |
| CVE-2019-19364 | CB Catalyst Browse Sony | 7.8 | Dec 4 | A weak malicious user can escalate its privilege whenever CatalystProductionSuite.2019.1.exe (version 1.1.0.21) and CatalystBrowseSuite.2019.1.exe (version 1.1.0.21) installers… |
| CVE-2019-15744 | XX Xperia Xzs Firmware Sony | 3.3 | Nov 14 | The Sony Xperia Xperia XZs Android device with a build fingerprint of Sony/keyaki_softbank/keyaki_softbank:7.1.1/TONE3-3.0.0-SOFTBANK-170517-0323/1:user/dev-keys contains a… |
| CVE-2019-15743 | XT Xperia Touch Firmware Sony | 5.5 | Nov 14 | The Sony Xperia Touch Android device with a build fingerprint of Sony/blanc_windy/blanc_windy:7.0/LOIRE-SMART-BLANC-1.0.0-170530-0834/1:user/dev-keys contains a pre-installed app… |
| CVE-2019-15416 | XX Xperia Xzs Firmware Sony | 7.8 | Nov 14 | The Sony keyaki_kddi Android device with a build fingerprint of Sony/keyaki_kddi/keyaki_kddi:7.1.1/TONE3-3.0.0-KDDI-170517-0326/1:user/dev-keys contains a pre-installed app with a… |
| CVE-2019-11890 | BF Bravia Firmware Sony | 7.5 | Jul 9 | Sony Bravia Smart TV devices allow remote attackers to cause a denial of service (device hang or reboot) via a SYN flood attack over a wired or Wi-Fi LAN |
| CVE-2019-11889 | BF Bravia Firmware Sony | 7.5 | Jul 9 | Sony BRAVIA Smart TV devices allow remote attackers to cause a denial of service (device hang) via a crafted web page over HbbTV |
| CVE-2019-5982 | VU Vaio Update Sony | 7.5 | Jul 5 | Improper download file verification vulnerability in VAIO Update 7.3.0.03150 and earlier allows remote attackers to conduct a man-in-the-middle attack via a malicous wireless LAN… |
| CVE-2019-5981 | VU Vaio Update Sony | 7.8 | Jul 5 | Improper authorization vulnerability in VAIO Update 7.3.0.03150 and earlier allows an attackers to execute arbitrary executable file with administrative privilege via unspecified… |
| CVE-2018-16595 | RF R5c Firmware Sony | 6.5 | Jun 19 | The Photo Sharing Plus component on Sony Bravia TV through 8.587 devices has a Buffer Overflow |
| CVE-2018-16594 | WF We6 Firmware Sony | 8.1 | Jun 19 | The Photo Sharing Plus component on Sony Bravia TV through 8.587 devices allows Directory Traversal |
| CVE-2018-16593 | WF Wd75 Firmware Sony | 8.8 | Jun 19 | The Photo Sharing Plus component on Sony Bravia TV through 8.587 devices allows Shell Metacharacter Injection |
| CVE-2019-12762 | XZ Xperia Z4 Firmware Sony | 4.2 | Jun 6 | Xiaomi Mi 5s Plus devices allow attackers to trigger touchscreen anomalies via a radio signal between 198 kHz and 203 kHz, as demonstrated by a transmitter and antenna hidden just… |
| CVE-2019-11336 | PS Photo Sharing Plus Sony | 8.1 | May 14 | Sony Bravia Smart TV devices allow remote attackers to retrieve the static Wi-Fi password (used when the TV is acting as an access point) by using the Photo Sharing Plus… |
| CVE-2018-14983 | XL Xperia L1 Firmware Sony | 5.5 | Apr 25 | The Sony Xperia L1 Android device with a build fingerprint of Sony/G3313/G3313:7.0/43.0.A.6.49/2867558199:user/release-keys contains the android framework (i.e., system_server)… |
| CVE-2019-10886 | PS Photo Sharing Plus Sony | 5.9 | Apr 19 | An incorrect access control exists in the Sony Photo Sharing Plus application in the firmware before PKG6.5629 version (for the X7500D TV and other applicable TVs) |
| CVE-2019-10844 | NN Neural Network Libraries Sony | 9.8 | Apr 4 | nbla/logger.cpp in libnnabla.a in Sony Neural Network Libraries (aka nnabla) through v1.0.14 relies on the HOME environment variable, which might be untrusted |
| CVE-2018-0690 | MC Music Center For PC Sony | 7.5 | Nov 15 | An unvalidated software update vulnerability in Music Center for PC version 1.0.02 and earlier could allow a man-in-the-middle attacker to tamper with an update file and inject… |
| CVE-2018-0656 | DP Digital Paper App Sony | 7.8 | Sep 4 | Untrusted search path vulnerability in The installer of Digital Paper App version 1.4.0.16050 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an… |
| CVE-2018-3937 | SF Snc-eb600 Firmware Sony | 7.2 | Aug 14 | An exploitable command injection vulnerability exists in the measurementBitrateExec functionality of Sony IPELA E Series Network Camera G5 firmware 1.87.00 |
| CVE-2018-3938 | SF Snc-eb600 Firmware Sony | 10.0 | Aug 14 | An exploitable stack-based buffer overflow vulnerability exists in the 802dot1xclientcert.cgi functionality of Sony IPELA E Series Camera G5 firmware 1.87.00 |
| CVE-2018-0600 | PH Playmemories Home Sony | 7.8 | Jun 26 | Untrusted search path vulnerability in the installer of PlayMemories Home for Windows ver.5.5.01 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an… |
| CVE-2017-17010 | CM Content Manager Assistant Sony | 7.8 | Dec 27 | Untrusted search path vulnerability in Content Manager Assistant for PlayStation version 3.55.7671.0901 and earlier allows an attacker to gain privileges via a Trojan horse DLL in… |
| CVE-2017-10909 | MC Music Center Sony | 7.8 | Dec 22 | Untrusted search path vulnerability in Music Center for PC version 1.0.01 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory |
| CVE-2017-10892 | MC Music Center Sony | 7.8 | Dec 1 | Untrusted search path vulnerability in Music Center for PC version 1.0.00 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory |
| CVE-2017-10891 | MG Media GO Sony | 7.8 | Dec 1 | Untrusted search path vulnerability in Media Go version 3.2.0.191 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory |
| CVE-2017-2287 | NP Nfc Port Software Remover Sony | 7.8 | Aug 2 | Untrusted search path vulnerability in NFC Port Software remover Ver.1.3.0.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory |
| CVE-2017-2286 | NP Nfc Port Firmware Sony | 7.8 | Aug 2 | Untrusted search path vulnerability in NFC Port Software Version 5.5.0.6 and earlier (for RC-S310, RC-S320, RC-S330, RC-S370, RC-S380, RC-S380/S), NFC Port Software Version… |
| CVE-2017-2277 | WF Wg-c10 Firmware Sony | 9.1 | Jul 22 | WG-C10 v3.0.79 and earlier allows an attacker to bypass access restrictions to obtain or alter information stored in the external storage connected to the product via unspecified… |
| CVE-2017-2276 | WF Wg-c10 Firmware Sony | 7.2 | Jul 22 | Buffer overflow in WG-C10 v3.0.79 and earlier allows an attacker to execute arbitrary commands via unspecified vectors |
