Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

91 records

TI-2026-15037 CVE-2026-18284 · GHSA-3j3v-5mxm-2c69

OS command injection in Sony XAV-9500ES

Priority LOW 38

Sony XAV-9500ES Crash Dump Handler Command Injection Local Privilege Escalation Vulnerability.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.01022 Published 2026-08-20 No fix listed CWE-78
TI-2026-15036 CVE-2026-18283 · GHSA-j2pg-r74g-f5v5

Improper authorization in Sony XAV-9500ES

Priority LOW 12

Sony XAV-9500ES udev USB Rules Authorization Bypass Vulnerability.

CVSS 3.0LOW 2.4 Physical No auth No interaction EPSS 0.0027 Published 2026-08-20 No fix listed CWE-285
Priority LOW 37

Sony XAV-9500ES AVRCP_Br_Response_Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.0 Adjacent network No auth User interaction EPSS 0.00457 Published 2026-08-20 No fix listed CWE-122
Priority LOW 37

Sony XAV-9500ES l2_reassemble_sdu Heap-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.0 Adjacent network No auth User interaction EPSS 0.00457 Published 2026-08-20 No fix listed CWE-122
TI-2026-15033 CVE-2026-18280 · GHSA-jqhr-c9q5-h984

Buffer overflow in Sony XAV-9500ES

Priority LOW 18

Sony XAV-9500ES gpsd Buffer Overflow Arbitrary Code Execution Vulnerability.

CVSS 3.0LOW 3.9 Physical No auth No interaction EPSS 0.00251 Published 2026-08-20 No fix listed CWE-120
TI-2026-15032 CVE-2026-18279 · GHSA-w47w-hvhg-f7v6

Buffer overflow in Sony XAV-9500ES

Priority MEDIUM 41

Sony XAV-9500ES RTSP SETUP Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00686 Published 2026-08-20 No fix listed CWE-120
TI-2026-15031 CVE-2026-18278 · GHSA-vv43-p65q-97r5

Out-of-bounds read in Sony XAV-9500ES

Priority LOW 16

Sony XAV-9500ES prh_l2_decode_packet Out-Of-Bounds Read Information Disclosure Vulnerability.

CVSS 3.0LOW 3.5 Adjacent network No auth User interaction EPSS 0.00244 Published 2026-08-20 No fix listed CWE-125
Priority LOW 33

A privilege escalation vulnerability exists in PlayStation 4 firmware versions 13.00 through 13.02.

CVSS 3.1HIGH 7.4 Local No auth No interaction EPSS 0.00085 Published 2026-06-02 Fixed in 13.02 CWE-367
Priority MEDIUM 63

Sony BRAVIA Digital Signage 1.7.8 contains a remote file inclusion vulnerability that allows attackers to inject arbitrary client-side scripts through the content material URL parameter.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00541 Published 2026-01-06 No fix listed CWE-829
TI-2025-40108 CVE-2025-64772 · GHSA-5w96-gg7w-f8mg

Uncontrolled search path in Sony INZONE Hub

Priority LOW 38

The installer of INZONE Hub 1.0.10.3 to 1.0.17.0 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries.

CVSS 4.0HIGH 8.4 Local No auth User interaction EPSS 0.00198 Published 2025-12-01 No fix listed CWE-427
TI-2025-40073 CVE-2025-64730 · GHSA-q4qj-8g79-gj6r

Cross-site scripting in Sony SNC-CX600W

Priority LOW 21

Cross-site scripting vulnerability exists in SNC-CX600W all versions.

CVSS 4.0MEDIUM 4.8 Adjacent network No auth User interaction EPSS 0.00204 Published 2025-11-25 No fix listed CWE-79
Priority LOW 10

Cross-site request forgery vulnerability exists in SNC-CX600W versions prior to Ver.2.8.0.

CVSS 4.0LOW 2.1 Network No auth User interaction EPSS 0.0012 Published 2025-11-25 No fix listed CWE-352
TI-2025-04916 CVE-2025-5475 · GHSA-jvv2-77hm-qf8r

Integer overflow in Sony XAV-AX8500

Priority LOW 35

Sony XAV-AX8500 Bluetooth Packet Handling Integer Overflow Remote Code Execution Vulnerability.

CVSS 3.1HIGH 7.5 Adjacent network No auth No interaction EPSS 0.00342 Published 2025-06-21 No fix listed CWE-190
Priority LOW 35

Sony XAV-AX8500 Bluetooth L2CAP Protocol Heap-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.1HIGH 7.5 Adjacent network No auth No interaction EPSS 0.00377 Published 2025-06-21 No fix listed CWE-122
TI-2025-04919 CVE-2025-5478 · GHSA-xgfx-jr44-636c

Integer overflow in Sony XAV-AX8500

Priority MEDIUM 40

Sony XAV-AX8500 Bluetooth SDP Protocol Integer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00421 Published 2025-06-21 No fix listed CWE-190
Priority LOW 35

Sony XAV-AX8500 Bluetooth AVCTP Protocol Heap-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.5 Adjacent network No auth No interaction EPSS 0.00377 Published 2025-06-21 No fix listed CWE-122
Load more