Vulnerabilidades de Canon Inc.
CVEs publicadas que afetam produtos de Canon Inc.: 16 registro(s), com severidade, exploração e correções.
i-SENSYS LBP630C Series 7Satera LBP670C Series 7Satera MF750C Series 7Color imageCLASS LBP630C 7Color imageCLASS MF650C Series 7imageCLASS LBP230 Series 7imageCLASS X LBP1238 II 7imageCLASS MF450 Series 7imageCLASS X MF1238 II 7imageCLASS X MF1643i II 7imageCLASS X MF1643iF II 7Lbp1238 Ii Firmware 7i-SENSYS MF650C Series 7i-SENSYS LBP230 Series 71238P II 71238Pr II 7i-SENSYS MF450 Series 7i-SENSYS MF550 Series 71238i II 71238iF II 7imageRUNNER 1643i II 7imageRUNNER 1643iF II 7Lbp632cdw Firmware 7Lbp633cdw Firmware 7Lbp236dw Firmware 7Lbp237dw Firmware 7Mf1643i Ii Firmware 7Mf1643if Ii Firmware 7Mf455dw Firmware 7Mf453dw Firmware 7Mf452dw Firmware 7Mf451dw Firmware 7Mf654cdw Firmware 7Mf656cdw Firmware 7Mf653cdw Firmware 7Mf652cw Firmware 7Mf1238 Ii Firmware 7EOS Network Setting Tool for macOS 5EOS Network Setting Tool for Windows 5Eos Network Setting Tool 5
CVE-2026-9262
Alta · 7.5
CWE-1188 15/06/2026
Insecure Default Initialization of Resource em Canon Inc. Eos Network Setting Tool
Use of a non-secure protocol as the default FTP configuration in Canon EOS Network Setting Tool Version 1.5.0 or earlier
CVE-2026-9261
Crítica · 9.8
CWE-327 15/06/2026
Use of a Broken or Risky Cryptographic Algorithm em Canon Inc. Eos Network Setting Tool
Use of weak SSH cryptographic algorithms in Canon EOS Network Setting Tool Version 1.5.0 or earlier
CVE-2026-9260
Crítica · 9.8
CWE-798 15/06/2026
Use of Hard-coded Credentials em Canon Inc. Eos Network Setting Tool
Use of hard-coded cryptographic keys in Canon EOS Network Setting Tool Version 1.5.0 or earlier
CVE-2026-9259
Crítica · 9.8
CWE-295 15/06/2026
Improper Certificate Validation em Canon Inc. Eos Network Setting Tool
Improper validation of server certificates in Canon EOS Network Setting Tool Version 1.5.0 or earlier
CVE-2026-9258
Crítica · 9.8
CWE-295 15/06/2026
Improper Certificate Validation em Canon Inc. Eos Network Setting Tool
Improper validation of SSH host keys in Canon EOS Network Setting Tool Version 1.5.0 or earlier
CVE-2026-6892
Média · 5.0
CWE-59 28/05/2026
Link Following em Canon Inc. Canon PIXUS iX6800 Series CUPS Printer Driver for macOS
Improper handling of symbolic links in the installer of CUPS Printer Driver for macOS(*) may allow a local attacker with login privileges to exploit a specially crafted symbolic link during installation to modify permissions of directories for which they would not normally have authorization.
*:Canon PIXUS iX6800 Series CUPS Printer Driver for macOS Version 16.91.0.0 or earlier (Japan)
Canon PIXMA MG2500 Series and iX6800 Series CUPS Printer Driver for macOS Version 16.91.0.0 or earlier (US and Europe)
CVE-2026-6891
Média · 5.0
CWE-59 28/05/2026
Link Following em Canon Inc. My Image Garden for macOS
Improper handling of symbolic links in the installer of My Image Garden for macOS Version 3.6.8 or earlier may allow a local attacker with login privileges to exploit a specially crafted symbolic link during installation to modify permissions of files for which they would not normally have authorization.
CVE-2026-1789
Média · 4.9
CWE-807 23/04/2026
A vulnerability in the browser-based remote management interface may allow an…
A vulnerability in the browser-based remote management interface may allow an administrator to access sensitive information on the device via crafted requests, affecting certain production printers and office/small office multifunction printers.
CVE-2026-1585
Média · 6.7
CWE-428 26/02/2026
An unquoted Windows service executable path vulnerability in IJ Scan Utility for Windows…
An unquoted Windows service executable path vulnerability in IJ Scan Utility for Windows versions 1.1.2 through 1.5.0 may allow a local attacker to execute a malicious file with the privileges of the affected service.
CVE-2025-14237
Crítica · 9.8
CWE-787 15/01/2026
Out-of-bounds Write em Canon Inc. Mf455dw Firmware
Buffer overflow in XPS font parse processing on Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera LBP670C Series/Satera MF750C Series firmware v06.02 and earlier sold in Japan.Color imageCLASS LBP630C/Color imageCLASS MF650C Series/imageCLASS LBP230 Series/imageCLASS X LBP1238 II/imageCLASS MF450 Series/imageCLASS X MF1238 II/imageCLASS X MF1643i II/imageCLASS X MF1643iF II firmware v06.02 and earlier sold in US.i-SENSYS LBP630C Series/i-SENSYS MF650C Series/i-SENSYS LBP230 Series/1238P II/1238Pr II/i-SENSYS MF450 Series/i-SENSYS MF550 Series/1238i II/1238iF II/imageRUNNER 1643i II/imageRUNNER 1643iF II firmware v06.02 and earlier sold in Europe.
CVE-2025-14236
Crítica · 9.8
CWE-787 15/01/2026
Out-of-bounds Write em Canon Inc. Mf455dw Firmware
Buffer overflow in Address Book attribute tag processing on Small Office Multifunction Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera LBP670C Series/Satera MF750C Series firmware v06.02 and earlier sold in Japan.Color imageCLASS LBP630C/Color imageCLASS MF650C Series/imageCLASS LBP230 Series/imageCLASS X LBP1238 II/imageCLASS MF450 Series/imageCLASS X MF1238 II/imageCLASS X MF1643i II/imageCLASS X MF1643iF II firmware v06.02 and earlier sold in US.i-SENSYS LBP630C Series/i-SENSYS MF650C Series/i-SENSYS LBP230 Series/1238P II/1238Pr II/i-SENSYS MF450 Series/i-SENSYS MF550 Series/1238i II/1238iF II/imageRUNNER 1643i II/imageRUNNER 1643iF II firmware v06.02 and earlier sold in Europe.
CVE-2025-14235
Crítica · 9.8
CWE-787 15/01/2026
Out-of-bounds Write em Canon Inc. Mf656cdw Firmware
Buffer overflow in XPS font fpgm data processing on Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera LBP670C Series/Satera MF750C Series firmware v06.02 and earlier sold in Japan.Color imageCLASS LBP630C/Color imageCLASS MF650C Series/imageCLASS LBP230 Series/imageCLASS X LBP1238 II/imageCLASS MF450 Series/imageCLASS X MF1238 II/imageCLASS X MF1643i II/imageCLASS X MF1643iF II firmware v06.02 and earlier sold in US.i-SENSYS LBP630C Series/i-SENSYS MF650C Series/i-SENSYS LBP230 Series/1238P II/1238Pr II/i-SENSYS MF450 Series/i-SENSYS MF550 Series/1238i II/1238iF II/imageRUNNER 1643i II/imageRUNNER 1643iF II firmware v06.02 and earlier sold in Europe.
CVE-2025-14234
Crítica · 9.8
CWE-787 15/01/2026
Out-of-bounds Write em Canon Inc. Mf455dw Firmware
Buffer overflow in CPCA list processing on Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera LBP670C Series/Satera MF750C Series firmware v06.02 and earlier sold in Japan.Color imageCLASS LBP630C/Color imageCLASS MF650C Series/imageCLASS LBP230 Series/imageCLASS X LBP1238 II/imageCLASS MF450 Series/imageCLASS X MF1238 II/imageCLASS X MF1643i II/imageCLASS X MF1643iF II firmware v06.02 and earlier sold in US.i-SENSYS LBP630C Series/i-SENSYS MF650C Series/i-SENSYS LBP230 Series/1238P II/1238Pr II/i-SENSYS MF450 Series/i-SENSYS MF550 Series/1238i II/1238iF II/imageRUNNER 1643i II/imageRUNNER 1643iF II firmware v06.02 and earlier sold in Europe.
CVE-2025-14233
Crítica · 9.8
CWE-763 15/01/2026
Invalid free in CPCA file deletion processing on Small Office Multifunction Printers and…
Invalid free in CPCA file deletion processing on Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera LBP670C Series/Satera MF750C Series firmware v06.02 and earlier sold in Japan.Color imageCLASS LBP630C/Color imageCLASS MF650C Series/imageCLASS LBP230 Series/imageCLASS X LBP1238 II/imageCLASS MF450 Series/imageCLASS X MF1238 II/imageCLASS X MF1643i II/imageCLASS X MF1643iF II firmware v06.02 and earlier sold in US.i-SENSYS LBP630C Series/i-SENSYS MF650C Series/i-SENSYS LBP230 Series/1238P II/1238Pr II/i-SENSYS MF450 Series/i-SENSYS MF550 Series/1238i II/1238iF II/imageRUNNER 1643i II/imageRUNNER 1643iF II firmware v06.02 and earlier sold in Europe.
CVE-2025-14232
Crítica · 9.8
CWE-787 15/01/2026
Out-of-bounds Write em Canon Inc. Mf455dw Firmware
Buffer overflow in XML processing of XPS file in Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera LBP670C Series/Satera MF750C Series firmware v06.02 and earlier sold in Japan.Color imageCLASS LBP630C/Color imageCLASS MF650C Series/imageCLASS LBP230 Series/imageCLASS X LBP1238 II/imageCLASS MF450 Series/imageCLASS X MF1238 II/imageCLASS X MF1643i II/imageCLASS X MF1643iF II firmware v06.02 and earlier sold in US.i-SENSYS LBP630C Series/i-SENSYS MF650C Series/i-SENSYS LBP230 Series/1238P II/1238Pr II/i-SENSYS MF450 Series/i-SENSYS MF550 Series/1238i II/1238iF II/imageRUNNER 1643i II/imageRUNNER 1643iF II firmware v06.02 and earlier sold in Europe.
CVE-2025-14231
Crítica · 9.8
CWE-787 15/01/2026
Out-of-bounds Write em Canon Inc. Lbp1238 Ii Firmware
Buffer overflow in print job processing by WSD on Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera LBP670C Series/Satera MF750C Series firmware v06.02 and earlier sold in Japan.Color imageCLASS LBP630C/Color imageCLASS MF650C Series/imageCLASS LBP230 Series/imageCLASS X LBP1238 II/imageCLASS MF450 Series/imageCLASS X MF1238 II/imageCLASS X MF1643i II/imageCLASS X MF1643iF II firmware v06.02 and earlier sold in US.i-SENSYS LBP630C Series/i-SENSYS MF650C Series/i-SENSYS LBP230 Series/1238P II/1238Pr II/i-SENSYS MF450 Series/i-SENSYS MF550 Series/1238i II/1238iF II/imageRUNNER 1643i II/imageRUNNER 1643iF II firmware v06.02 and earlier sold in Europe.