Canon Inc. vulnerabilities
Published CVEs affecting Canon Inc. products: 16 record(s), with severity, exploitation and fixes.
i-SENSYS LBP630C Series 7Satera LBP670C Series 7Satera MF750C Series 7Color imageCLASS LBP630C 7Color imageCLASS MF650C Series 7imageCLASS LBP230 Series 7imageCLASS X LBP1238 II 7imageCLASS MF450 Series 7imageCLASS X MF1238 II 7imageCLASS X MF1643i II 7imageCLASS X MF1643iF II 7Lbp1238 Ii Firmware 7i-SENSYS MF650C Series 7i-SENSYS LBP230 Series 71238P II 71238Pr II 7i-SENSYS MF450 Series 7i-SENSYS MF550 Series 71238i II 71238iF II 7imageRUNNER 1643i II 7imageRUNNER 1643iF II 7Lbp632cdw Firmware 7Lbp633cdw Firmware 7Lbp236dw Firmware 7Lbp237dw Firmware 7Mf1643i Ii Firmware 7Mf1643if Ii Firmware 7Mf455dw Firmware 7Mf453dw Firmware 7Mf452dw Firmware 7Mf451dw Firmware 7Mf654cdw Firmware 7Mf656cdw Firmware 7Mf653cdw Firmware 7Mf652cw Firmware 7Mf1238 Ii Firmware 7EOS Network Setting Tool for macOS 5EOS Network Setting Tool for Windows 5Eos Network Setting Tool 5
CVE-2026-9262
High · 7.5
CWE-1188 Jun 15, 2026
Insecure Default Initialization of Resource in Canon Inc. Eos Network Setting Tool
Use of a non-secure protocol as the default FTP configuration in Canon EOS Network Setting Tool Version 1.5.0 or earlier
CVE-2026-9261
Critical · 9.8
CWE-327 Jun 15, 2026
Use of a Broken or Risky Cryptographic Algorithm in Canon Inc. Eos Network Setting Tool
Use of weak SSH cryptographic algorithms in Canon EOS Network Setting Tool Version 1.5.0 or earlier
CVE-2026-9260
Critical · 9.8
CWE-798 Jun 15, 2026
Use of Hard-coded Credentials in Canon Inc. Eos Network Setting Tool
Use of hard-coded cryptographic keys in Canon EOS Network Setting Tool Version 1.5.0 or earlier
CVE-2026-9259
Critical · 9.8
CWE-295 Jun 15, 2026
Improper Certificate Validation in Canon Inc. Eos Network Setting Tool
Improper validation of server certificates in Canon EOS Network Setting Tool Version 1.5.0 or earlier
CVE-2026-9258
Critical · 9.8
CWE-295 Jun 15, 2026
Improper Certificate Validation in Canon Inc. Eos Network Setting Tool
Improper validation of SSH host keys in Canon EOS Network Setting Tool Version 1.5.0 or earlier
CVE-2026-6892
Medium · 5.0
CWE-59 May 28, 2026
Link Following in Canon Inc. Canon PIXUS iX6800 Series CUPS Printer Driver for macOS
Improper handling of symbolic links in the installer of CUPS Printer Driver for macOS(*) may allow a local attacker with login privileges to exploit a specially crafted symbolic link during installation to modify permissions of directories for which they would not normally have authorization.
*:Canon PIXUS iX6800 Series CUPS Printer Driver for macOS Version 16.91.0.0 or earlier (Japan)
Canon PIXMA MG2500 Series and iX6800 Series CUPS Printer Driver for macOS Version 16.91.0.0 or earlier (US and Europe)
CVE-2026-6891
Medium · 5.0
CWE-59 May 28, 2026
Link Following in Canon Inc. My Image Garden for macOS
Improper handling of symbolic links in the installer of My Image Garden for macOS Version 3.6.8 or earlier may allow a local attacker with login privileges to exploit a specially crafted symbolic link during installation to modify permissions of files for which they would not normally have authorization.
CVE-2026-1789
Medium · 4.9
CWE-807 Apr 23, 2026
A vulnerability in the browser-based remote management interface may allow an…
A vulnerability in the browser-based remote management interface may allow an administrator to access sensitive information on the device via crafted requests, affecting certain production printers and office/small office multifunction printers.
CVE-2026-1585
Medium · 6.7
CWE-428 Feb 26, 2026
An unquoted Windows service executable path vulnerability in IJ Scan Utility for Windows…
An unquoted Windows service executable path vulnerability in IJ Scan Utility for Windows versions 1.1.2 through 1.5.0 may allow a local attacker to execute a malicious file with the privileges of the affected service.
CVE-2025-14237
Critical · 9.8
CWE-787 Jan 15, 2026
Out-of-bounds Write in Canon Inc. Mf455dw Firmware
Buffer overflow in XPS font parse processing on Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera LBP670C Series/Satera MF750C Series firmware v06.02 and earlier sold in Japan.Color imageCLASS LBP630C/Color imageCLASS MF650C Series/imageCLASS LBP230 Series/imageCLASS X LBP1238 II/imageCLASS MF450 Series/imageCLASS X MF1238 II/imageCLASS X MF1643i II/imageCLASS X MF1643iF II firmware v06.02 and earlier sold in US.i-SENSYS LBP630C Series/i-SENSYS MF650C Series/i-SENSYS LBP230 Series/1238P II/1238Pr II/i-SENSYS MF450 Series/i-SENSYS MF550 Series/1238i II/1238iF II/imageRUNNER 1643i II/imageRUNNER 1643iF II firmware v06.02 and earlier sold in Europe.
CVE-2025-14236
Critical · 9.8
CWE-787 Jan 15, 2026
Out-of-bounds Write in Canon Inc. Mf455dw Firmware
Buffer overflow in Address Book attribute tag processing on Small Office Multifunction Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera LBP670C Series/Satera MF750C Series firmware v06.02 and earlier sold in Japan.Color imageCLASS LBP630C/Color imageCLASS MF650C Series/imageCLASS LBP230 Series/imageCLASS X LBP1238 II/imageCLASS MF450 Series/imageCLASS X MF1238 II/imageCLASS X MF1643i II/imageCLASS X MF1643iF II firmware v06.02 and earlier sold in US.i-SENSYS LBP630C Series/i-SENSYS MF650C Series/i-SENSYS LBP230 Series/1238P II/1238Pr II/i-SENSYS MF450 Series/i-SENSYS MF550 Series/1238i II/1238iF II/imageRUNNER 1643i II/imageRUNNER 1643iF II firmware v06.02 and earlier sold in Europe.
CVE-2025-14235
Critical · 9.8
CWE-787 Jan 15, 2026
Out-of-bounds Write in Canon Inc. Mf656cdw Firmware
Buffer overflow in XPS font fpgm data processing on Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera LBP670C Series/Satera MF750C Series firmware v06.02 and earlier sold in Japan.Color imageCLASS LBP630C/Color imageCLASS MF650C Series/imageCLASS LBP230 Series/imageCLASS X LBP1238 II/imageCLASS MF450 Series/imageCLASS X MF1238 II/imageCLASS X MF1643i II/imageCLASS X MF1643iF II firmware v06.02 and earlier sold in US.i-SENSYS LBP630C Series/i-SENSYS MF650C Series/i-SENSYS LBP230 Series/1238P II/1238Pr II/i-SENSYS MF450 Series/i-SENSYS MF550 Series/1238i II/1238iF II/imageRUNNER 1643i II/imageRUNNER 1643iF II firmware v06.02 and earlier sold in Europe.
CVE-2025-14234
Critical · 9.8
CWE-787 Jan 15, 2026
Out-of-bounds Write in Canon Inc. Mf455dw Firmware
Buffer overflow in CPCA list processing on Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera LBP670C Series/Satera MF750C Series firmware v06.02 and earlier sold in Japan.Color imageCLASS LBP630C/Color imageCLASS MF650C Series/imageCLASS LBP230 Series/imageCLASS X LBP1238 II/imageCLASS MF450 Series/imageCLASS X MF1238 II/imageCLASS X MF1643i II/imageCLASS X MF1643iF II firmware v06.02 and earlier sold in US.i-SENSYS LBP630C Series/i-SENSYS MF650C Series/i-SENSYS LBP230 Series/1238P II/1238Pr II/i-SENSYS MF450 Series/i-SENSYS MF550 Series/1238i II/1238iF II/imageRUNNER 1643i II/imageRUNNER 1643iF II firmware v06.02 and earlier sold in Europe.
CVE-2025-14233
Critical · 9.8
CWE-763 Jan 15, 2026
Invalid free in CPCA file deletion processing on Small Office Multifunction Printers and…
Invalid free in CPCA file deletion processing on Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera LBP670C Series/Satera MF750C Series firmware v06.02 and earlier sold in Japan.Color imageCLASS LBP630C/Color imageCLASS MF650C Series/imageCLASS LBP230 Series/imageCLASS X LBP1238 II/imageCLASS MF450 Series/imageCLASS X MF1238 II/imageCLASS X MF1643i II/imageCLASS X MF1643iF II firmware v06.02 and earlier sold in US.i-SENSYS LBP630C Series/i-SENSYS MF650C Series/i-SENSYS LBP230 Series/1238P II/1238Pr II/i-SENSYS MF450 Series/i-SENSYS MF550 Series/1238i II/1238iF II/imageRUNNER 1643i II/imageRUNNER 1643iF II firmware v06.02 and earlier sold in Europe.
CVE-2025-14232
Critical · 9.8
CWE-787 Jan 15, 2026
Out-of-bounds Write in Canon Inc. Mf455dw Firmware
Buffer overflow in XML processing of XPS file in Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera LBP670C Series/Satera MF750C Series firmware v06.02 and earlier sold in Japan.Color imageCLASS LBP630C/Color imageCLASS MF650C Series/imageCLASS LBP230 Series/imageCLASS X LBP1238 II/imageCLASS MF450 Series/imageCLASS X MF1238 II/imageCLASS X MF1643i II/imageCLASS X MF1643iF II firmware v06.02 and earlier sold in US.i-SENSYS LBP630C Series/i-SENSYS MF650C Series/i-SENSYS LBP230 Series/1238P II/1238Pr II/i-SENSYS MF450 Series/i-SENSYS MF550 Series/1238i II/1238iF II/imageRUNNER 1643i II/imageRUNNER 1643iF II firmware v06.02 and earlier sold in Europe.
CVE-2025-14231
Critical · 9.8
CWE-787 Jan 15, 2026
Out-of-bounds Write in Canon Inc. Lbp1238 Ii Firmware
Buffer overflow in print job processing by WSD on Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera LBP670C Series/Satera MF750C Series firmware v06.02 and earlier sold in Japan.Color imageCLASS LBP630C/Color imageCLASS MF650C Series/imageCLASS LBP230 Series/imageCLASS X LBP1238 II/imageCLASS MF450 Series/imageCLASS X MF1238 II/imageCLASS X MF1643i II/imageCLASS X MF1643iF II firmware v06.02 and earlier sold in US.i-SENSYS LBP630C Series/i-SENSYS MF650C Series/i-SENSYS LBP230 Series/1238P II/1238Pr II/i-SENSYS MF450 Series/i-SENSYS MF550 Series/1238i II/1238iF II/imageRUNNER 1643i II/imageRUNNER 1643iF II firmware v06.02 and earlier sold in Europe.