CVE-2026-50255

MEDIUM

Sony Corporation Optical Disc Archive Software For Windows - Incorrect Default Permissions

Title source: rule

Description

Incorrect default permissions issue exists in Optical Disc Archive Software for Windows 5.5.3 and earlier. If this vulnerability is exploited, arbitrary code may be executed with SYSTEM privileges.

References (2)

Core 2

Core References

https://www.sony.com/electronics/support/software/00403421

https://jvn.jp/en/jp/JVN79926428/

Scores

CVSS v3 6.7

EPSS 0.0009

EPSS Percentile 0.5%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-276

Status published

Products (1)

Sony Corporation/Optical Disc Archive Software for Windows 5.5.3 and earlier

Published Jun 16, 2026

Tracked Since Jun 16, 2026