What’s Vulnerable › Vulnerabilities

CVE-2025-5995: Canon EOS Webcam Utility Pro for MAC OS contains an insecure permission issue potentially leading to code execution and privilege escalation

• Severity: medium (CVSS 4.6 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-06-26 · updated 2026-06-17
• Weakness: CWE-732

Description

Canon EOS Webcam Utility Pro for MAC OS version 2.3d (2.3.29) and earlier contains an improper directory permissions vulnerability. Exploitation of this vulnerability requires administrator access by a malicious user. An attacker could modify the directory, potentially resulting in code execution and ultimately leading to privilege escalation.

Affected products

• Canon USA Inc. Canon EOS Webcam Utility Pro: through 2.3d (2.3.29) (including)

References

• https://www.canon-europe.com/psirt/advisory-information
• https://www.usa.canon.com/about-us/to-our-customers/vulnerability-mitigation-remediation-for-canon-eos-webcam-utility-pro-for-mac-os

Get alerted when CVE-2025-5995 or the next vulnerability affects your stack