CVE-2019-19364: Sony Catalyst Browse

High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days.

A weak malicious user can escalate its privilege whenever CatalystProductionSuite.2019.1.exe (version 1.1.0.21) and CatalystBrowseSuite.2019.1.exe (version 1.1.0.21) installers run. The vulnerability is in the form of DLL Hijacking. The installers try to load DLLs that don’t exist from its current directory; by doing so, an attacker can quickly escalate its privileges.

Affected products

• Sony Catalyst Browse: up to and including 2019.1
• Sony Catalyst Production Suite: up to and including 2019.1

Published 2019-12-04. Last modified 2026-06-17.