Sony Music Center vulnerabilities

2 CVEs affecting Sony Music Center, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-10909, published 2017-12-22.

More from Sony.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-10909, published 2017-12-22. High severity, CVSS 7.8. EPSS: 1.9% chance of exploitation in the next 30 days. Untrusted search path vulnerability in Music Center for PC version 1.0.01 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
• CVE-2017-10892, published 2017-12-01. High severity, CVSS 7.8. EPSS: 1% chance of exploitation in the next 30 days. Untrusted search path vulnerability in Music Center for PC version 1.0.00 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.