sony Vulnerability Advisory Catalog

Total 72 security vulnerabilities recorded for sony software and firmware.

← Back to All Vendors
Component: bravia_signage

Sony BRAVIA Digital Signage 1.7.8 contains a remote file inclusion vulnerability that allows attackers to inject arbitrary client-side scripts through...

📅 2026-01-06
CVSS 6.1 Dossier →
CVE-2020-36923 CRITICAL
Component: bravia_signage

Sony BRAVIA Digital Signage 1.7.8 contains an insecure direct object reference vulnerability that allows attackers to bypass authorization controls. A...

📅 2026-01-06
CVSS 9.8 Dossier →
Component: bravia_signage

Sony BRAVIA Digital Signage 1.7.8 contains an information disclosure vulnerability that allows unauthenticated attackers to access sensitive system de...

📅 2026-01-06
CVSS 7.5 Dossier →
CVE-2020-36885 CRITICAL
Component: snc-dh120t_firmware

Sony IPELA Network Camera 1.82.01 contains a stack buffer overflow vulnerability in the ftpclient.cgi endpoint that allows remote attackers to execute...

📅 2025-12-10
CVSS 9.8 Dossier →
Component: snc-cx600w_firmware

Cross-site scripting vulnerability exists in SNC-CX600W all versions. If this vulnerability is exploited, an arbitrary script may be executed on the w...

📅 2025-11-25
CVSS 6.1 Dossier →
Component: snc-cx600w_firmware

Cross-site request forgery vulnerability exists in SNC-CX600W versions prior to Ver.2.8.0. If a user accesses a specially crafted webpage while logged...

📅 2025-11-25
CVSS 6.5 Dossier →
Component: xav-ax8500_firmware

Sony XAV-AX8500 Bluetooth ERTM Channel Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authenticat...

📅 2025-06-21
CVSS 8.8 Dossier →
Component: xav-ax8500_firmware

Sony XAV-AX8500 Bluetooth AVCTP Protocol Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent at...

📅 2025-06-21
CVSS 7.5 Dossier →
Component: xav-ax8500_firmware

Sony XAV-AX8500 Bluetooth SDP Protocol Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to e...

📅 2025-06-21
CVSS 8.8 Dossier →
Component: xav-ax8500_firmware

Sony XAV-AX8500 Bluetooth L2CAP Protocol Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent at...

📅 2025-06-21
CVSS 7.5 Dossier →
Component: xav-ax8500_firmware

Sony XAV-AX8500 Bluetooth Improper Isolation Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authe...

📅 2025-06-21
CVSS 8.8 Dossier →
Component: xav-ax8500_firmware

Sony XAV-AX8500 Bluetooth Packet Handling Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers t...

📅 2025-06-21
CVSS 7.5 Dossier →
Component: xav-ax5500_firmware

Sony XAV-AX5500 USB Configuration Descriptor Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows physically present attacke...

📅 2024-09-23
CVSS 6.8 Dossier →
Component: xav-ax5500_firmware

Sony XAV-AX5500 Insufficient Firmware Update Validation Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to...

📅 2024-09-23
CVSS 6.8 Dossier →
Component: content_transfer

Untrusted search path vulnerability in the installer of Content Transfer (for Windows) Ver.1.3 and prior allows an attacker to gain privileges via a T...

📅 2022-10-24
CVSS 7.8 Dossier →
CVE-2022-3349 MEDIUM
Component: playstation_4_firmware

A vulnerability was found in Sony PS4 and PS5. It has been classified as critical. This affects the function UVFAT_readupcasetable of the component ex...

📅 2022-09-28
CVSS 6.8 Dossier →
CVE-2022-23747 CRITICAL
Component: xperia_1_firmware

In Sony Xperia series 1, 5, and Pro, an out of bound memory access can occur due to lack of validation of the number of frames being passed during mus...

📅 2022-08-17
CVSS 9.8 Dossier →
Component: playmemories_home

Sony PlayMemories Home v6.0 contains an unquoted service path which allows attackers to escalate privileges to the system level....

📅 2022-05-20
CVSS 6.7 Dossier →
Component: audio_usb_driver

Untrusted search path vulnerability in the installer of Sony Audio USB Driver V1.10 and prior and the installer of HAP Music Transfer Ver.1.3.0 and pr...

📅 2021-08-26
CVSS 7.8 Dossier →
Component: srs-xb33_firmware

Sony SRS-XB33 and SRS-XB43 devices through 2021-08-09 allow remote attackers to recover speech signals from an LED on the device, via a telescope and ...

📅 2021-08-11
CVSS 5.9 Dossier →
Component: wf-1000x_firmware

SONY Wireless Headphones WF-1000X, WF-SP700N, WH-1000XM2, WH-1000XM3, WH-CH700N, WH-H900N, WH-XB700, WH-XB900N, WI-1000X, WI-C600N and WI-SP600N with ...

📅 2020-06-09
CVSS 8.8 Dossier →
Component: catalyst_browse

A weak malicious user can escalate its privilege whenever CatalystProductionSuite.2019.1.exe (version 1.1.0.21) and CatalystBrowseSuite.2019.1.exe (ve...

📅 2019-12-04
CVSS 7.8 Dossier →
Component: xperia_xzs_firmware

The Sony Xperia Xperia XZs Android device with a build fingerprint of Sony/keyaki_softbank/keyaki_softbank:7.1.1/TONE3-3.0.0-SOFTBANK-170517-0323/1:us...

📅 2019-11-14
CVSS 3.3 Dossier →
Component: xperia_touch_firmware

The Sony Xperia Touch Android device with a build fingerprint of Sony/blanc_windy/blanc_windy:7.0/LOIRE-SMART-BLANC-1.0.0-170530-0834/1:user/dev-keys ...

📅 2019-11-14
CVSS 5.5 Dossier →
Page 1 of 3 (72 Total Records)