CPE2026-002: Vulnerability Remediation for IJ Scan Utility for Windows

February 24, 2026

Canon U.S.A., Inc. has recently become aware of a potential security vulnerability involving the IJ Scan Utility for Windows. This potential vulnerability may occur because the executable path of a Windows service is not enclosed in quotation marks. If the file path contains spaces, a local attacker could exploit this condition by leveraging a path with spaces, potentially allowing a malicious file to be executed with the privileges of the affected service.

CVE/CVSS
CVE-2026-1585: An unquoted Windows service executable path vulnerability in IJ Scan Utility for Windows may allow a local attacker to execute a malicious file with the privileges of the affected service. CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N Base Score: 8.4.

Affected Software:
IJ Scan Utility for Windows – Version 1.1.2 through 1.5.0

Remediation:
Canon has released updated drivers to address this potential vulnerability on our Canon USA website. We recommend that our customers install the latest MP Driver and confirm that the following software version is installed: IJ Scan Utility for Windows – Version 1.6.0 and higher

Credits:
Canon acknowledges Enival Chen for reporting this potential vulnerability.

Thank you,
Customer Support
Canon U.S.A., Inc.

Get personalized support via Canon Account. Access your account, or create a new account, click here to get started.

GET SUPPORT
Need help with your product? Let us help you find what you need.
Product Support
NEED IT FIRST
Sign up for up-to-the-minute Canon News, Sales and Deals.
LEARN WITH CANON
Discover great new ways to enjoy your products with exclusive articles, training and events.
Learn more