VulnerabilityDeferred

CVE-2026-50255

If this vulnerability is exploited, arbitrary code may be executed with SYSTEM privileges.

MEDIUM 5.4EPSS 0.09%

Does this matter?

Lower severity and a low EPSS score (0.09%). Track it; it rarely justifies an emergency change on its own.

Description

Incorrect default permissions issue exists in Optical Disc Archive Software for Windows 5.5.3 and earlier. If this vulnerability is exploited, arbitrary code may be executed with SYSTEM privileges.

CVSS 4.0: 5.4 MEDIUMCVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
EPSS: 0.09% probability · 0th percentile
CISA KEV: Not listed
Weakness: CWE-276
Source: vultures@jpcert.or.jp

References

https://jvn.jp/en/jp/JVN79926428/
https://www.sony.com/electronics/support/software/00403421

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.