Ricoh Company vulnerabilities
We track 12 vulnerabilities in Ricoh Company products across 17 products. 12 are rated high or critical, and none are known to be exploited. The most recent was published on June 15, 2026.
Latest Ricoh Company vulnerabilities
- 8.5 High severity
Multiple printer drivers: Uncontrolled Search Path Element
Multiple printer drivers provided by Ricoh Company, Ltd. and KONICA MINOLTA JAPAN, INC. contain a privilege escalation vulnerability. If this vulnerability is exploited, an attacker who can log in to a computer running an affected printer driver could elevate
- 8.4 High severity
ジョブログ集計/分析ソフトウェア RICOHジョブログ集計ツール: Uncontrolled Search Path Element
The installer for ジョブログ集計/分析ソフトウェア RICOHジョブログ集計ツール versions prior to Ver.1.3.7 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with administrative privileges.
- 8.4 High severity
See "References" section: Unquoted Search Path or Element
Products provided by Oki Electric Industry Co., Ltd. and its OEM products (Ricoh Co., Ltd., Murata Machinery, Ltd.) register Windows services with unquoted file paths. A user with the write permission on the root directory of the system drive may execute arbit
- 8.2 High severity
RICOH Streamline NX: Authorization Bypass Through User-Controlled Key
Improper authorization vulnerability exists in RICOH Streamline NX 3.5.1 to 24R3. If a man-in-the-middle attack is conducted on the communication between the affected product and its user, and some crafted request is processed by the product, the user's regist
- 8.5 High severity
Multiple driver installers for Windows: Files or Directories Accessible to External Parties
Multiple Brother driver installers for Windows contain a privilege escalation vulnerability. If exploited, an arbitrary program may be executed with the administrative privilege. As for the details of affected product names, model numbers, and versions, refer
- 9.3 Critical severity
RICOH Streamline NX V3 PC Client: Improper Limitation of a Pathname to a Restricted Directory
Path traversal vulnerability exists in RICOH Streamline NX V3 PC Client versions 3.5.0 to 3.242.0. If this vulnerability is exploited, arbitrary code may be executed on the PC where the product is running by tampering with specific files used on the product.
- 7.7 High severity
Multiple laser printers and MFPs which…: Stack-based Buffer Overflow
Stack-based buffer overflow vulnerability exists in multiple laser printers and MFPs which implement Ricoh Web Image Monitor. If this vulnerability is exploited, receiving a specially crafted request created and sent by an attacker may lead to arbitrary code e
- 7.5 High severity
JavaTM Platform: Initialization of a Resource with an Insecure Default
Initialization of a resource with an insecure default vulnerability exists in JavaTM Platform Ver.12.89 and earlier. If this vulnerability is exploited, the product may be affected by some known TLS1.0 and TLS1.1 vulnerabilities. As for the specific products/m
- 8.2 High severity
IM C3510/C3010: Out-of-bounds Write
Out-of-bounds write vulnerability exists in Ricoh MFPs and printers. If a remote attacker sends a specially crafted request to the affected products, the products may be able to cause a denial-of-service (DoS) condition and/or user's data may be destroyed.
- 9.8 Critical severity
Ricoh Streamline NX PC Client: Improper Control of Generation of Code
Use of potentially dangerous function issue exists in Ricoh Streamline NX PC Client. If this vulnerability is exploited, an attacker may create an arbitrary file in the PC where the product is installed.
- 7.8 High severity
Printer Driver Packager NX: Insufficient Verification of Data Authenticity
The driver installation package created by Printer Driver Packager NX v1.0.02 to v1.1.25 fails to detect its modification and may spawn an unexpected process with the administrative privilege. If a non-administrative user modifies the driver installation packa
- 7.8 High severity
Installer of Device Software Manager: Untrusted Search Path
Untrusted search path vulnerability in the installer of Device Software Manager prior to Ver.2.20.3.0 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.