# cve.now: Canon Inc.

The newest entries naming Canon Inc. as an affected vendor (up to 200), of 59 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-9262](https://cve.now/CVE-2026-9262.md): Use of a non-secure protocol as the default FTP configuration in Canon EOS Network Setting Tool Version 1.5.0 or earlier (CVSS 7.1)
- [CVE-2026-9261](https://cve.now/CVE-2026-9261.md): Use of weak SSH cryptographic algorithms in Canon EOS Network Setting Tool Version 1.5.0 or earlier (CVSS 7.6)
- [CVE-2026-9260](https://cve.now/CVE-2026-9260.md): Use of hard-coded cryptographic keys in Canon EOS Network Setting Tool Version 1.5.0 or earlier (CVSS 6.9)
- [CVE-2026-9259](https://cve.now/CVE-2026-9259.md): Improper validation of server certificates in Canon EOS Network Setting Tool Version 1.5.0 or earlier (CVSS 7.1)
- [CVE-2026-9258](https://cve.now/CVE-2026-9258.md): Improper validation of SSH host keys in Canon EOS Network Setting Tool Version 1.5.0 or earlier (CVSS 7.1)
- [CVE-2026-6892](https://cve.now/CVE-2026-6892.md): Improper handling of symbolic links in the installer of CUPS Printer Driver for macOS(\*) may allow a local attacker with login privileges to (CVSS 5.0)
- [CVE-2026-6891](https://cve.now/CVE-2026-6891.md): Improper handling of symbolic links in the installer of My Image Garden for macOS Version 3.6.8 or earlier may allow a local attacker with l (CVSS 5.0)
- [CVE-2026-1789](https://cve.now/CVE-2026-1789.md): A vulnerability in the browser-based remote management interface may allow an administrator to access sensitive information on the device vi (CVSS 4.9)
- [CVE-2026-1585](https://cve.now/CVE-2026-1585.md): An unquoted Windows service executable path vulnerability in IJ Scan Utility for Windows versions 1.1.2 through 1.5.0 may allow a local atta (CVSS 8.4)
- [CVE-2025-14237](https://cve.now/CVE-2025-14237.md): Buffer overflow in XPS font parse processing on Small Office Multifunction Printers and Laser Printers(\*) which may allow an attacker on the (CVSS 9.3)
- [CVE-2025-14236](https://cve.now/CVE-2025-14236.md): Buffer overflow in Address Book attribute tag processing on Small Office Multifunction Printers(\*) which may allow an attacker on the networ (CVSS 9.3)
- [CVE-2025-14235](https://cve.now/CVE-2025-14235.md): Buffer overflow in XPS font fpgm data processing on Small Office Multifunction Printers and Laser Printers(\*) which may allow an attacker on (CVSS 9.3)
- [CVE-2025-14234](https://cve.now/CVE-2025-14234.md): Buffer overflow in CPCA list processing on Small Office Multifunction Printers and Laser Printers(\*) which may allow an attacker on the netw (CVSS 9.3)
- [CVE-2025-14233](https://cve.now/CVE-2025-14233.md): Invalid free in CPCA file deletion processing on Small Office Multifunction Printers and Laser Printers(\*) which may allow an attacker on th (CVSS 9.3)
- [CVE-2025-14232](https://cve.now/CVE-2025-14232.md): Buffer overflow in XML processing of XPS file in Small Office Multifunction Printers and Laser Printers(\*) which may allow an attacker on th (CVSS 9.3)
- [CVE-2025-14231](https://cve.now/CVE-2025-14231.md): Buffer overflow in print job processing by WSD on Small Office Multifunction Printers and Laser Printers(\*) which may allow an attacker on t (CVSS 9.3)
- [CVE-2025-7698](https://cve.now/CVE-2025-7698.md): Out-of-bounds read vulnerabilities in print processing of Generic Plus PCL6 Printer Driver / Generic Plus UFR II Printer Driver / Generic Pl (CVSS 5.9)
- [CVE-2025-9904](https://cve.now/CVE-2025-9904.md): Unallocated memory access vulnerability in print processing of Generic Plus PCL6 Printer Driver / Generic Plus UFR II Printer Driver / Gener (CVSS 5.3)
- [CVE-2025-9903](https://cve.now/CVE-2025-9903.md): Out-of-bounds write vulnerabilities in print processing of Generic Plus PCL6 Printer Driver / Generic Plus UFR II Printer Driver / Generic P (CVSS 5.9)
- [CVE-2025-2146](https://cve.now/CVE-2025-2146.md): Buffer overflow in WebService Authentication processing of Small Office Multifunction Printers and Laser Printers(\*) which may allow an atta (CVSS 9.8)
- [CVE-2025-3079](https://cve.now/CVE-2025-3079.md): A passback vulnerability which relates to office/small office multifunction printers and laser printers. (CVSS 6.3)
- [CVE-2025-3078](https://cve.now/CVE-2025-3078.md): A passback vulnerability which relates to production printers and office multifunction printers. (CVSS 6.3)
- [CVE-2025-1268](https://cve.now/CVE-2025-1268.md): Out-of-bounds vulnerability in EMF Recode processing of Generic Plus PCL6 Printer Driver / Generic Plus UFR II Printer Driver / Generic Plus (CVSS 9.4)
- [CVE-2025-0236](https://cve.now/CVE-2025-0236.md): Out-of-bounds vulnerability in slope processing during curve rendering in Generic PCL6 V4 Printer Driver / Generic UFR II V4 Printer Driver (CVSS 5.3)
- [CVE-2025-0235](https://cve.now/CVE-2025-0235.md): Out-of-bounds vulnerability due to improper memory release during image rendering in Generic PCL6 V4 Printer Driver / Generic UFR II V4 Prin (CVSS 5.3)
- [CVE-2025-0234](https://cve.now/CVE-2025-0234.md): Out-of-bounds vulnerability in curve segmentation processing of Generic PCL6 V4 Printer Driver / Generic UFR II V4 Printer Driver / Generic (CVSS 5.3)
- [CVE-2024-12649](https://cve.now/CVE-2024-12649.md): Buffer overflow in XPS data font processing of Small Office Multifunction Printers and Laser Printers(\*) which may allow an attacker on the (CVSS 9.8)
- [CVE-2024-12648](https://cve.now/CVE-2024-12648.md): Buffer overflow in TIFF data EXIF tag processing of Small Office Multifunction Printers and Laser Printers(\*) which may allow an attacker on (CVSS 9.8)
- [CVE-2024-12647](https://cve.now/CVE-2024-12647.md): Buffer overflow in CPCA font download processing of Small Office Multifunction Printers and Laser Printers(\*) which may allow an attacker on (CVSS 9.8)
- [CVE-2024-2184](https://cve.now/CVE-2024-2184.md): Buffer overflow in identifier field of WSD probe request process of Small Office Multifunction Printers and Laser Printers(\*) which may allo (CVSS 9.8)
- [CVE-2024-0244](https://cve.now/CVE-2024-0244.md): Buffer overflow in CPCA PCFAX number process of Office Multifunction Printers and Laser Printers(\*) which may allow an attacker on the netwo (CVSS 9.8)
- [CVE-2023-6234](https://cve.now/CVE-2023-6234.md): Buffer overflow in CPCA Color LUT Resource Download process of Office Multifunction Printers and Laser Printers(\*) which may allow an attack (CVSS 9.8)
- [CVE-2023-6233](https://cve.now/CVE-2023-6233.md): Buffer overflow in SLP attribute request process of Office Multifunction Printers and Laser Printers(\*) which may allow an attacker on the n (CVSS 9.8)
- [CVE-2023-6232](https://cve.now/CVE-2023-6232.md): Buffer overflow in the Address Book username process in authentication of Mobile Device Function of Office Multifunction Printers and Laser (CVSS 9.8)
- [CVE-2023-6231](https://cve.now/CVE-2023-6231.md): Buffer overflow in WSD probe request process of Office Multifunction Printers and Laser Printers(\*) which may allow an attacker on the netwo (CVSS 9.8)
- [CVE-2023-6230](https://cve.now/CVE-2023-6230.md): Buffer overflow in the Address Book password process in authentication of Mobile Device Function of Office Multifunction Printers and Laser (CVSS 9.8)
- [CVE-2023-6229](https://cve.now/CVE-2023-6229.md): Buffer overflow in CPCA PDL Resource Download process of Office Multifunction Printers and Laser Printers(\*) which may allow an attacker on (CVSS 9.8)
- [CVE-2023-1764](https://cve.now/CVE-2023-1764.md): Canon IJ Network Tool/Ver.4.7.5 and earlier (supported OS: OS X 10.9.5-macOS 13),IJ Network Tool/Ver.4.7.3 and earlier (supported OS: OS X 1 (CVSS 6.5)
- [CVE-2023-1763](https://cve.now/CVE-2023-1763.md): Canon IJ Network Tool/Ver.4.7.5 and earlier (supported OS: OS X 10.9.5-macOS 13),IJ Network Tool/Ver.4.7.3 and earlier (supported OS: OS X 1 (CVSS 6.5)
- [CVE-2023-0859](https://cve.now/CVE-2023-0859.md): Arbitrary Files can be installed in the Setting Data Import function of Office / Small Office Multifunction Printers and Laser Printers(\*). (CVSS 2.2)
- [CVE-2023-0858](https://cve.now/CVE-2023-0858.md): Improper Authentication of RemoteUI of Office / Small Office Multifunction Printers and Laser Printers(\*) which may allow an attacker on the (CVSS 3.1)
- [CVE-2023-0857](https://cve.now/CVE-2023-0857.md): Unintentional change of settings during initial registration of system administrators which uses control protocols. (CVSS 5.9)
- [CVE-2023-0856](https://cve.now/CVE-2023-0856.md): Buffer overflow in IPP sides attribute process of Office / Small Office Multifunction Printers and Laser Printers(\*) which may allow an atta (CVSS 9.8)
- [CVE-2023-0855](https://cve.now/CVE-2023-0855.md): Buffer overflow in IPP number-up attribute process of Office / Small Office Multifunction Printers and Laser Printers(\*) which may allow an (CVSS 9.8)
- [CVE-2023-0854](https://cve.now/CVE-2023-0854.md): Buffer overflow in NetBIOS QNAME registering and communication process of Office / Small Office Multifunction Printers and Laser Printers(\*) (CVSS 9.8)
- [CVE-2023-0853](https://cve.now/CVE-2023-0853.md): Buffer overflow in mDNS NSEC record registering process of Office / Small Office Multifunction Printers and Laser Printers(\*) which may allo (CVSS 9.8)
- [CVE-2023-0852](https://cve.now/CVE-2023-0852.md): Buffer overflow in the Address Book of Mobile Device function of Office / Small Office Multifunction Printers and Laser Printers(\*) which ma (CVSS 9.8)
- [CVE-2023-0851](https://cve.now/CVE-2023-0851.md): Buffer overflow in CPCA Resource Download process of Office / Small Office Multifunction Printers and Laser Printers(\*) which may allow an a (CVSS 9.8)
- [CVE-2022-43608](https://cve.now/CVE-2022-43608.md): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF644Cdw 10.03 (CVSS 8.8)
- [CVE-2022-24674](https://cve.now/CVE-2022-24674.md): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF644Cdw 10.02 (CVSS 8.8)
- [CVE-2022-24673](https://cve.now/CVE-2022-24673.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Canon imageCLASS MF644Cdw 10.02 printers. (CVSS 8.8)
- [CVE-2022-24672](https://cve.now/CVE-2022-24672.md): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF644Cdw 10.02 (CVSS 8.8)
- [CVE-2021-20877](https://cve.now/CVE-2021-20877.md): Cross-site scripting vulnerability in Canon laser printers and small office multifunctional printers (LBP162L/LBP162, MF4890dw, MF269dw/MF26 (no CVSS)
- [CVE-2019-6001](https://cve.now/CVE-2019-6001.md): Buffer overflow in PTP (Picture Transfer Protocol) of EOS series digital cameras (EOS-1D X firmware version 2.1.0 and earlier, EOS-1D X MKII (no CVSS)
- [CVE-2019-6000](https://cve.now/CVE-2019-6000.md): Buffer overflow in PTP (Picture Transfer Protocol) of EOS series digital cameras (EOS-1D X firmware version 2.1.0 and earlier, EOS-1D X MKII (no CVSS)
- [CVE-2019-5999](https://cve.now/CVE-2019-5999.md): Buffer overflow in PTP (Picture Transfer Protocol) of EOS series digital cameras (EOS-1D X firmware version 2.1.0 and earlier, EOS-1D X MKII (no CVSS)
- [CVE-2019-5998](https://cve.now/CVE-2019-5998.md): Buffer overflow in PTP (Picture Transfer Protocol) of EOS series digital cameras (EOS-1D X firmware version 2.1.0 and earlier, EOS-1D X MKII (no CVSS)
- [CVE-2019-5995](https://cve.now/CVE-2019-5995.md): Missing authorization vulnerability exists in EOS series digital cameras (EOS-1D X firmware version 2.1.0 and earlier, EOS-1D X MKII firmwar (no CVSS)
- [CVE-2019-5994](https://cve.now/CVE-2019-5994.md): Buffer overflow in PTP (Picture Transfer Protocol) of EOS series digital cameras (EOS-1D X firmware version 2.1.0 and earlier, EOS-1D X MKII (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/canon
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.