CVE-2025-64772

Severity: high (CVSS 8.4 v4.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-12-01 · updated 2026-10-18
Weakness: CWE-427

Description

The installer of INZONE Hub 1.0.10.3 to 1.0.17.0 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with the privilege of the user invoking the installer.

Affected products

Sony Corporation INZONE Hub: from 1.0.10.3 through 1.0.17.0

References

https://jvn.jp/en/jp/JVN28247549/
https://www.sony.com/electronics/support/others-software/inzone-hub

Get alerted when CVE-2025-64772 or the next vulnerability affects your stack