CVE-2025-64772
The installer of INZONE Hub 1.0.10.3 to 1.0.17.0 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with the privilege of the user invoking the installer.
- Score
- CVSS 4.0 8.4 High
- Status
- Deferred - vultures@jpcert.or.jp
- Published
- 2025-12-01
- Last modified
- 2026-10-18
- Weaknesses
- CWE-427
Affected products
References
- https://www.sony.com/electronics/support/others-software/inzone-hub
- https://jvn.jp/en/jp/JVN28247549/
