CVE-2026-50255
Deferred Deferred - Pending Action

Incorrect Default Permissions in Optical Disc Archive Software for Windows

Publication date: 2026-06-16

Last updated on: 2026-06-16

Assigner: JPCERT/CC

Description
Incorrect default permissions issue exists in Optical Disc Archive Software for Windows 5.5.3 and earlier. If this vulnerability is exploited, arbitrary code may be executed with SYSTEM privileges.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-06-16
Last Modified
2026-06-16
Generated
2026-07-06
AI Q&A
2026-06-16
EPSS Evaluated
2026-07-05
NVD
CVE-2026-50255
EUVD
EUVD-2026-37035

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
sony optical_disc_archive_software to 5.5.3 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-276 During installation, installed file permissions are set to allow anyone to modify those files.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-50255 is a vulnerability in the Optical Disc Archive Software for Windows versions 5.5.3 and earlier, developed by Sony Corporation. It involves incorrect default permissions in the software's installers, which means that the file access permissions are improperly set.

Because of this issue, an attacker could exploit the vulnerability to execute arbitrary code with SYSTEM privileges on the affected system.

Impact Analysis

If this vulnerability is exploited, an attacker could run arbitrary code with SYSTEM privileges, which is the highest level of access on a Windows system.

This could lead to full control over the affected system, allowing the attacker to install programs, change or delete data, or create new accounts with full user rights.

Detection Guidance

This vulnerability involves incorrect default permissions in the Optical Disc Archive Software for Windows versions 5.5.3 and earlier. Detection would focus on verifying the version of the installed software and checking the file access permission settings of the software's installers.

You can detect the presence of the vulnerable software by checking the installed version of Optical Disc Archive Software on your Windows system.

  • Use PowerShell to check the installed version: Get-ItemProperty 'HKLM:\Software\Microsoft\Windows\CurrentVersion\Uninstall\*' | Where-Object { $_.DisplayName -like '*Optical Disc Archive Software*' } | Select-Object DisplayName, DisplayVersion
  • Check file permissions on the installer files to identify improper access rights that could be exploited.
Mitigation Strategies

The recommended immediate mitigation step is to update the Optical Disc Archive Software to the latest installer version provided by Sony Corporation.

Updating the software will correct the improper file access permission settings and prevent arbitrary code execution with SYSTEM privileges.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-50255. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart