Canon

Canon Inc.

CVEs, 365 days1749 all time, 0 rejected
Quality100%median 99%
CVSS by the CNA100%share of records
CWE100%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA0%lower is better
OrganisationCanon Inc.
RoleCNA
TypeVendor
Reports tojpcert → mitre
ScopeVulnerabilities in products and services under the Canon brand.
Advisorieshttps://psirt.canon/advisory-information/
  • CVE-2026-3245 2026-08-02 · CVSS 7.7
    A deserialization vulnerability in PRISMAproduction Version 6.5 or earlier that may lead to arbitrary code execution.
  • CVE-2026-9262 2026-06-15 · CVSS 7.1
    Use of a non-secure protocol as the default FTP configuration in Canon EOS Network Setting Tool Version 1.5.0 or earlier
  • CVE-2026-9261 2026-06-15 · CVSS 7.6
    Use of weak SSH cryptographic algorithms in Canon EOS Network Setting Tool Version 1.5.0 or earlier
  • CVE-2026-9260 2026-06-15 · CVSS 6.9
    Use of hard-coded cryptographic keys in Canon EOS Network Setting Tool Version 1.5.0 or earlier
  • CVE-2026-9259 2026-06-15 · CVSS 7.1
    Improper validation of server certificates in Canon EOS Network Setting Tool Version 1.5.0 or earlier
  • CVE-2026-9258 2026-06-15 · CVSS 7.1
    Improper validation of SSH host keys in Canon EOS Network Setting Tool Version 1.5.0 or earlier
  • CVE-2026-6892 2026-05-29 · CVSS 5.0
    Improper handling of symbolic links in the installer of CUPS Printer Driver for macOS(*) may allow a local attacker with login privileges to exploit a specially
  • CVE-2026-6891 2026-05-28 · CVSS 5.0
    Improper handling of symbolic links in the installer of My Image Garden for macOS Version 3.6.8 or earlier may allow a local attacker with login privileges to e
  • CVE-2026-1789 2026-04-23 · CVSS 4.9
    A vulnerability in the browser-based remote management interface may allow an administrator to access sensitive information on the device via crafted requests,
  • CVE-2026-1585 2026-02-26 · CVSS 8.4
    An unquoted Windows service executable path vulnerability in IJ Scan Utility for Windows versions 1.1.2 through 1.5.0 may allow a local attacker to execute a ma
  • CVE-2025-14237 2026-01-15 · CVSS 9.3
    Buffer overflow in XPS font parse processing on Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to
  • CVE-2025-14236 2026-01-15 · CVSS 9.3
    Buffer overflow in Address Book attribute tag processing on Small Office Multifunction Printers(*) which may allow an attacker on the network segment to trigger
  • CVE-2025-14235 2026-01-15 · CVSS 9.3
    Buffer overflow in XPS font fpgm data processing on Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment
  • CVE-2025-14234 2026-01-15 · CVSS 9.3
    Buffer overflow in CPCA list processing on Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigg
  • CVE-2025-14233 2026-01-15 · CVSS 9.3
    Invalid free in CPCA file deletion processing on Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to
  • CVE-2025-14232 2026-01-15 · CVSS 9.3
    Buffer overflow in XML processing of XPS file in Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to
  • CVE-2025-14231 2026-01-15 · CVSS 9.3
    Buffer overflow in print job processing by WSD on Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment t
  • CVE-2025-7698 2025-09-29 · CVSS 5.9
    Out-of-bounds read vulnerabilities in print processing of Generic Plus PCL6 Printer Driver / Generic Plus UFR II Printer Driver / Generic Plus LIPS4 Printer Dri
  • CVE-2025-9904 2025-09-29 · CVSS 5.3
    Unallocated memory access vulnerability in print processing of Generic Plus PCL6 Printer Driver / Generic Plus UFR II Printer Driver / Generic Plus LIPS4 Printe
  • CVE-2025-9903 2025-09-29 · CVSS 5.9
    Out-of-bounds write vulnerabilities in print processing of Generic Plus PCL6 Printer Driver / Generic Plus UFR II Printer Driver / Generic Plus LIPS4 Printer Dr
  • CVE-2025-2146 2025-05-25 · CVSS 9.8
    Buffer overflow in WebService Authentication processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network
  • CVE-2025-3079 2025-05-19 · CVSS 6.3
    A passback vulnerability which relates to office/small office multifunction printers and laser printers.
  • CVE-2025-3078 2025-05-19 · CVSS 6.3
    A passback vulnerability which relates to production printers and office multifunction printers.
  • CVE-2025-1268 2025-03-31 · CVSS 9.4
    Out-of-bounds vulnerability in EMF Recode processing of Generic Plus PCL6 Printer Driver / Generic Plus UFR II Printer Driver / Generic Plus LIPS4 Printer Drive
  • CVE-2025-0236 2025-02-26 · CVSS 5.3
    Out-of-bounds vulnerability in slope processing during curve rendering in Generic PCL6 V4 Printer Driver / Generic UFR II V4 Printer Driver / Generic LIPSLX V4

All CVE Program partners