CVE-2025-64772 HIGH

CVE-2025-64772

Vendor Sony Corporation
Product INZONE Hub
Weakness CWE-427
Published December 1, 2025
Last update December 1, 2025
View on NVD All CVEs

CVSS base score

7.8/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality High
Integrity High

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

The installer of INZONE Hub 1.0.10.3 to 1.0.17.0 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with the privilege of the user invoking the installer.

Key dates

02Disclosure timeline

December 1, 2025 CVE published
December 1, 2025 Record updated