CVE-2021-20793

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-08-26 · updated 2026-06-17
Weakness: CWE-427

Description

Untrusted search path vulnerability in the installer of Sony Audio USB Driver V1.10 and prior and the installer of HAP Music Transfer Ver.1.3.0 and prior allows an attacker to gain privileges and execute arbitrary code via a Trojan horse DLL in an unspecified directory.

Affected products

Sony Audio Usb Driver: through 1.10
Sony Hap Music Transfer: through 1.3.0

References

https://jvn.jp/en/jp/JVN80288258/index.html
https://www.sony.co.uk/electronics/support/software/00266642
https://www.sony.co.uk/electronics/support/software/00266749
https://www.sony.co.uk/electronics/support/software/00266758
https://jvn.jp/en/jp/JVN80288258/index.html
https://www.sony.co.uk/electronics/support/software/00266642
https://www.sony.co.uk/electronics/support/software/00266749
https://www.sony.co.uk/electronics/support/software/00266758

Get alerted when CVE-2021-20793 or the next vulnerability affects your stack