Skip to content

Logitech vulnerabilities

Products

Newest

logitech logi options+ Local privilege escalation in the Logi Options+ updater service on Windows CVE-2026-12518 8.5 HighSeptember 14, 2026
logitech options plus, logi options\+ +1 more Insecure Electron Fuses in Logitech Options Plus Allowing Arbitrary Code Execution on macOS CVE-2024-8258 2.0 LowSeptember 10, 2024
logitech options+, options\+ +1 more Logitech Options+ on MacOS prior 1.72 allows a local attacker to inject dynamic library within... CVE-2024-8011 2.0 LowAugust 25, 2024
logitech mevo webcam app MEVO WEBCAM APP Windows Unquoted Service Path Vulnerability CVE-2024-4031 4.4 MediumApril 23, 2024
cdata sync A path traversal vulnerability exists in the Java version of CData Sync < 23.4.8843 when running... CVE-2024-31851 8.6 HighApril 5, 2024
logitech logi tune Electron Code Injection in Logi Tune macOS Application CVE-2024-2537 4.4 MediumMarch 15, 2024
helix sync, perforce helix sync +1 more Command Injection in Helix Sync CVE-2024-0325 3.6 LowFebruary 1, 2024
logitech streamlabs desktop StreamLabs Desktop Application 1.9.0 is vulnerable to Incorrect Access Control via obs64.exe. An... CVE-2022-36263 7.3 HighAugust 19, 2022
logitech options Broken authentication on Logitech Options due to misvalidation of Oauth state parameter CVE-2022-0916 8.4 HighMay 3, 2022
logitech sync Logitech Sync desktop application prior to 2.4.574 - TOCTOU during installation leads to privelege escalation CVE-2022-0915 6.0 MediumApril 12, 2022
logitech s120 firmware, z120 firmware +1 more Logitech Z120 and S120 speakers through 2021-08-09 allow remote attackers to recover speech... CVE-2021-38547 5.9 MediumAugust 11, 2021
elecom co.,ltd. lan-w300n/rs, logitech lan-w300n\/rs firmware +1 more Improper check or handling of exceptional conditions in LOGITEC LAN-W300N/RS allows a remote... CVE-2021-20642 6.5 MediumFebruary 12, 2021
elecom co.,ltd. lan-w300n/rs, logitech lan-w300n\/rs firmware +1 more Cross-site request forgery (CSRF) vulnerability in LOGITEC LAN-W300N/RS allows remote attackers... CVE-2021-20641 6.5 MediumFebruary 12, 2021
logitec corporation lan-w300n/pgrb, logitech lan-w300n\/pgrb firmware +1 more Buffer overflow vulnerability in LOGITEC LAN-W300N/PGRB allows an attacker with administrative... CVE-2021-20640 6.8 MediumFebruary 12, 2021
logitec corporation lan-w300n/pgrb, logitech lan-w300n\/pgrb firmware +1 more LOGITEC LAN-W300N/PGRB allows an attacker with administrative privilege to execute arbitrary OS... CVE-2021-20639 6.8 MediumFebruary 12, 2021
logitec corporation lan-w300n/pgrb, logitech lan-w300n\/pgrb firmware +1 more LOGITEC LAN-W300N/PGRB allows an attacker with administrative privilege to execute arbitrary OS... CVE-2021-20638 6.8 MediumFebruary 12, 2021
logitec corporation lan-w300n/pr5b, logitech lan-w300n\/pr5b firmware +1 more Improper check or handling of exceptional conditions in LOGITEC LAN-W300N/PR5B allows a remote... CVE-2021-20637 6.5 MediumFebruary 12, 2021
logitec corporation lan-w300n/pr5b, logitech lan-w300n\/pr5b firmware +1 more Cross-site request forgery (CSRF) vulnerability in LOGITEC LAN-W300N/PR5B allows remote attackers... CVE-2021-20636 6.5 MediumFebruary 12, 2021
logitec corporation lan-wh450n/gr, logitech lan-wh450n\/gr firmware +1 more Improper restriction of excessive authentication attempts in LOGITEC LAN-WH450N/GR allows an... CVE-2021-20635 6.5 MediumFebruary 12, 2021
logitech k360 firmware, unifying receiver firmware +1 more Certain Logitech Unifying devices allow attackers to dump AES keys and addresses, leading to the... CVE-2019-13055 6.5 MediumJune 29, 2019
logitech r500 firmware The Logitech R500 presentation clicker allows attackers to determine the AES key, leading to... CVE-2019-13054 6.5 MediumJune 29, 2019
logitech unifying receiver firmware Logitech Unifying devices allow keystroke injection, bypassing encryption. The attacker must... CVE-2019-13053 6.5 MediumJune 29, 2019
logitech k360 firmware, k400r firmware, k750 firmware +2 more +4 more Logitech Unifying devices before 2016-02-26 allow keystroke injection, bypassing encryption, aka... CVE-2016-10761 6.5 MediumJune 29, 2019
logitech unifying receiver firmware Logitech Unifying devices allow live decryption if the pairing of a keyboard to a receiver is... CVE-2019-13052 6.5 MediumJune 29, 2019
logitech r700 laser presentation remote firmware Due to unencrypted and unauthenticated data communication, the wireless presenter Logitech R700... CVE-2019-12506 8.8 HighJune 7, 2019
logitech harmony hub, harmony hub firmware +1 more The Logitech Harmony Hub before version 4.15.206 is vulnerable to application level command... CVE-2018-15723 9.8 CriticalDecember 20, 2018
logitech harmony hub, harmony hub firmware +1 more The Logitech Harmony Hub before version 4.15.206 is vulnerable to OS command injection via the... CVE-2018-15722 8.1 HighDecember 20, 2018
logitech harmony hub, harmony hub firmware +1 more The XMPP server in Logitech Harmony Hub before version 4.15.206 is vulnerable to authentication... CVE-2018-15721 9.8 CriticalDecember 20, 2018
logitech harmony hub, harmony hub firmware +1 more Logitech Harmony Hub before version 4.15.206 contained two hard-coded accounts in the XMPP server... CVE-2018-15720 9.8 CriticalDecember 20, 2018
logitech connection utility software, logicool co ltd. the installer of logicool connection utility software +1 more Untrusted search path vulnerability in LOGICOOL CONNECTION UTILITY SOFTWARE versions before 2.30... CVE-2018-0621 7.8 HighJuly 26, 2018
logitech game software, logicool co ltd. the installer of logicool game software +1 more Untrusted search path vulnerability in LOGICOOL Game Software versions before 8.87.116 allows an... CVE-2018-0620 7.8 HighJuly 26, 2018
logitech media server Cross-site scripting (XSS) vulnerability in Logitech Media Server 7.9.0 allows remote attackers... CVE-2017-16568 Public exploit 5.4 MediumNovember 9, 2017
logitech media server Cross-site scripting (XSS) vulnerability in Logitech Media Server 7.9.0 allows remote attackers... CVE-2017-16567 Public exploit 5.4 MediumNovember 9, 2017
logitech media server DOM Based Cross Site Scripting (XSS) exists in Logitech Media Server 7.7.1, 7.7.2, 7.7.3, 7.7.5,... CVE-2017-15687 Public exploit 6.1 MediumOctober 23, 2017
amazonbasics firmware, dell km632 firmware, km714 firmware +2 more +4 more The firmware in Lenovo Ultraslim dongles, as used with Lenovo Liteon SK-8861, Ultraslim Wireless,... CVE-2016-6257 6.5 MediumAugust 2, 2016
logitech lan-w300n\/ru2 firmware Logitec LAN-W300N/R routers with firmware before 2.27 do not properly restrict login access,... CVE-2012-1250 10.0 HighJune 4, 2012
backweb, logitech desktop manager +1 more Multiple stack-based buffer overflows in the BackWeb Lite Install Runner ActiveX control in the... CVE-2008-0956 9.3 HighJune 12, 2008
logitech videocall Multiple stack-based buffer overflows in ActiveX controls (1) VibeC in (a) vibecontrol.dll, (2)... CVE-2007-2918 Public exploit EPSS 34.1% 6.8 MediumJune 1, 2007
logitech itouch keyboard, cordless freedom itouch keyboard, cordless itouch keyboard +2 more Logitech iTouch keyboards allows attackers with physical access to the system to bypass the... CVE-2002-1722 4.6 MediumDecember 31, 2002
logitech cordless freedom, cordless freedom navigator, cordless freedom pro +1 more +3 more A long 'synch' delay in Logitech wireless mice and keyboard receivers allows a remote attacker to... CVE-2001-0737 7.5 HighOctober 12, 2001