Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

canon

About This Vendor

canon is a technology vendor producing software and infrastructure products. As a software provider, canon's broad product portfolio across multiple domains—including operating systems, cloud infrastructure, enterprise applications, databases, networking, and security tools—creates a large attack surface. Additionally, long support cycles, widespread deployment, and continuous feature development contribute to the accumulation of discovered vulnerabilities over time. Major vendors typically report higher CVE counts not necessarily due to inferior security, but because of greater exposure to security research, responsible disclosure practices, and the sheer complexity of maintaining multiple product lines and legacy systems. Regular security assessments and patching of canon's products are critical for organizations running their software in production environments.

Vulnerability Trends for This Vendor

SecUtils has indexed 78 known vulnerabilities from canon. This includes 31 critical-severity issues and 20 high-severity issues that represent significant risk. These vulnerabilities affect 1008 distinct products across canon's portfolio, demonstrating the breadth of the vendor's product ecosystem and the importance of comprehensive patch management strategies. Disclosure dates span from 2004 through 2026, indicating decades of continuous security attention and research. Organizations deploying canon products should maintain active vulnerability monitoring, prioritize critical patches, and implement compensating controls where patches cannot be applied immediately.

ID Date Published Last Modified Severity (CVSSv3) Severity (CVSSv2) Exploit Available
CVE-2004-2166 2004-12-31 2025-04-03 - 7.5 Likely
CVE-2005-4827 2005-12-31 2025-04-03 - 7.5 Likely
CVE-2006-1185 2006-04-11 2025-04-03 - 7.5 Likely
CVE-2006-1188 2006-04-11 2025-04-03 - 7.5 Likely
CVE-2006-1192 2006-04-11 2025-04-03 - 2.6 Unknown
CVE-2006-2900 2006-06-07 2025-04-03 - 4.0 Unknown
CVE-2006-3354 2006-07-06 2025-04-03 - 5.0 Likely
CVE-2006-4680 2006-09-11 2025-04-03 - 4.0 Likely
CVE-2006-7065 2007-03-02 2025-04-09 - 5.0 Likely
CVE-2007-2680 2007-05-15 2025-04-09 - 4.3 Likely
CVE-2008-0303 2008-02-29 2025-04-09 - 6.4 Likely
CVE-2013-4613 2013-06-21 2025-04-11 - 7.5 Likely
CVE-2013-4614 2013-06-21 2025-04-11 - 2.1 Unknown
CVE-2013-4615 2013-06-21 2025-04-11 - 5.0 Likely
CVE-2015-5631 2015-09-11 2025-04-12 - 6.8 Likely
CVE-2018-11692 2018-06-04 2024-11-21 9.8 10.0 Likely
CVE-2018-11711 2018-06-04 2024-11-21 9.8 10.0 Likely
CVE-2018-12048 2018-06-08 2024-11-21 9.8 10.0 Likely
CVE-2018-12049 2018-06-08 2024-11-21 9.8 10.0 Likely
CVE-2018-12111 2018-06-11 2024-11-21 6.1 4.3 Likely
CVE-2019-5994 2019-08-06 2024-11-21 8.8 8.3 Unknown
CVE-2019-5995 2019-08-06 2024-11-21 6.5 4.8 Unknown
CVE-2019-5998 2019-08-06 2024-11-21 8.8 8.3 Unknown
CVE-2019-5999 2019-08-06 2024-11-21 8.8 8.3 Unknown
CVE-2019-6000 2019-08-06 2024-11-21 8.8 8.3 Unknown
CVE-2019-6001 2019-08-06 2024-11-21 6.8 7.2 Unknown
CVE-2019-14339 2019-09-05 2024-11-21 5.5 4.3 Likely
CVE-2020-10667 2020-03-19 2024-11-21 6.1 4.3 Likely
CVE-2020-10668 2020-03-19 2024-11-21 6.1 4.3 Likely
CVE-2020-10670 2020-03-19 2024-11-21 6.1 4.3 Likely
CVE-2020-10671 2020-03-19 2024-11-21 8.8 6.8 Likely
CVE-2020-10669 2020-03-19 2024-11-21 7.5 5.0 Likely
CVE-2020-12695 2020-06-08 2024-11-21 7.5 7.8 Likely
CVE-2020-26508 2020-11-16 2024-11-21 9.8 5.0 Likely
CVE-2020-16849 2020-11-30 2024-11-21 7.5 5.0 Likely
CVE-2021-38085 2021-08-11 2024-11-21 7.8 7.2 Unknown
CVE-2021-39367 2021-08-23 2024-11-21 5.3 5.0 Likely
CVE-2021-39368 2021-08-23 2024-11-21 6.1 4.3 Likely
CVE-2021-38154 2021-08-29 2024-11-21 7.5 4.3 Likely
CVE-2021-43471 2021-12-06 2024-11-21 7.5 7.8 Likely
CVE-2021-20877 2022-02-08 2024-11-21 4.8 3.5 Unknown
CVE-2022-26320 2022-03-14 2024-11-21 9.1 6.4 Likely
CVE-2022-26111 2022-04-25 2024-11-21 8.8 9.0 Likely
CVE-2022-37461 2022-09-30 2025-05-20 6.1 - -
CVE-2022-38765 2022-12-09 2025-04-23 6.5 - -
CVE-2022-24672 2023-03-28 2024-11-21 8.8 - -
CVE-2022-24673 2023-03-28 2024-11-21 9.8 - -
CVE-2022-24674 2023-03-28 2024-11-21 8.8 - -
CVE-2022-43608 2023-03-29 2024-11-21 8.8 - -
CVE-2023-0851 2023-05-11 2024-11-21 9.8 - -
CVE-2023-0852 2023-05-11 2024-11-21 9.8 - -
CVE-2023-0853 2023-05-11 2024-11-21 9.8 - -
CVE-2023-0854 2023-05-11 2024-11-21 9.8 - -
CVE-2023-0855 2023-05-11 2024-11-21 9.8 - -
CVE-2023-0856 2023-05-11 2024-11-21 9.8 - -
CVE-2023-0857 2023-05-11 2024-11-21 5.9 - -
CVE-2023-0858 2023-05-11 2024-11-21 3.1 - -
CVE-2023-0859 2023-05-11 2024-11-21 2.2 - -
CVE-2023-1763 2023-05-17 2024-11-21 6.5 - -
CVE-2023-1764 2023-05-17 2024-11-21 6.5 - -
CVE-2023-6229 2024-02-06 2024-11-21 9.8 - -
CVE-2023-6230 2024-02-06 2024-11-21 9.8 - -
CVE-2023-6231 2024-02-06 2024-11-21 9.8 - -
CVE-2023-6232 2024-02-06 2024-11-21 9.8 - -
CVE-2023-6233 2024-02-06 2024-11-21 9.8 - -
CVE-2023-6234 2024-02-06 2024-11-21 9.8 - -
CVE-2024-0244 2024-02-06 2024-11-21 9.8 - -
CVE-2024-12647 2025-01-28 2026-01-26 9.8 - -
CVE-2024-12648 2025-01-28 2026-01-26 9.8 - -
CVE-2024-12649 2025-01-28 2026-01-26 9.8 - -
CVE-2025-2146 2025-05-26 2025-06-03 9.8 - -
CVE-2025-14231 2026-01-16 2026-01-26 9.8 - -
CVE-2025-14232 2026-01-16 2026-01-26 9.8 - -
CVE-2025-14233 2026-01-16 2026-01-26 9.8 - -
CVE-2025-14234 2026-01-16 2026-01-26 9.8 - -
CVE-2025-14235 2026-01-16 2026-01-26 9.8 - -
CVE-2025-14236 2026-01-16 2026-01-26 9.8 - -
CVE-2025-14237 2026-01-16 2026-01-26 9.8 - -

How SecUtils Normalizes Vendor Data

SecUtils aggregates National Vulnerability Database (NVD) and MITRE records for canon by normalizing vendor identifiers across diverse data sources, mapping vendor names to their associated product lines, and collecting all known vulnerabilities under a unified vendor context. For every CVE associated with canon's products, we extract and structure Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) categories, CVSS severity metrics, and reference links to enable rapid vulnerability identification and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and vendor vulnerability tracking.