Nikon's vulnerability profile centers on a narrow set of imaging software and codec products, including the NIS-Elements Viewer and NEF Codec, that support professional microscopy and digital photography workflows. The observed weakness classes—out-of-bounds writes, heap-based buffer overflows, and out-of-bounds reads—reflect the memory-handling demands of image processing and decoding routines. Current severity, exploitation activity, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Nikon over time
Signals from CVEs in this vendor scope (10 CVEs).
10 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2022-40663HIGH This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0. User interaction is required to exploit t | Sep 15, 2022 | 7.8 | 26 | NO | NO |
CVE-2022-40662HIGH This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0. User interaction is required to exploit t | Sep 15, 2022 | 7.8 | 26 | NO | NO |
CVE-2022-40660HIGH This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0. User interaction is required to exploit t | Sep 15, 2022 | 7.8 | 26 | NO | NO |
CVE-2022-40656HIGH This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 13.2.0.21165. User interaction is required to exploit th | Sep 15, 2022 | 7.8 | 26 | NO | NO |
CVE-2022-40661HIGH This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0. User interaction is required to exploit t | Sep 15, 2022 | 7.8 | 25 | NO | NO |
CVE-2022-40659HIGH This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0. User interaction is required to exploit t | Sep 15, 2022 | 7.8 | 25 | NO | NO |
CVE-2022-40658HIGH This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0. User interaction is required to exploit t | Sep 15, 2022 | 7.8 | 25 | NO | NO |
CVE-2022-40657HIGH This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0. User interaction is required to exploit t | Sep 15, 2022 | 7.8 | 25 | NO | NO |
CVE-2022-40655HIGH This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0. User interaction is required to exploit t | Sep 15, 2022 | 7.8 | 25 | NO | NO |
CVE-2024-8025HIGH Nikon NEF Codec Thumbnail Provider NRW File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary | Nov 22, 2024 | 7.8 | 22 | NO | NO |
Signals from CVEs in this vendor scope (10 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Nikon.
Media articles that mention a CVE ID that affects a product developed by Nikon — matched by CVE ID, not by vendor name.