Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
logitech vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2024-4031
Unquoted Search Path or Element vulnerability in Logitech MEVO WEBCAM APP on Windows allows Local Execution of Code.
NA
CVE-2024-2537
Improper Control of Dynamically-Managed Code Resources vulnerability in Logitech Logi Tune on MacOS allows Local Code Inclusion.
NA
CVE-2023-52478
In the Linux kernel, the following vulnerability has been resolved: HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect hidpp_connect_event() has *four* time-of-check vs time-of-use (TOCTOU) races when it races with itself. hidpp_connect_event() primarily runs from a...
NA
CVE-2022-40135
An information leak vulnerability in the Smart USB Protection SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory.
Lenovo Ideacentre C5-14imb05 Firmware
Lenovo Thinkcentre E96z Firmware
Lenovo Ideacentre 3 07iab7 Firmware
Lenovo Ideacentre 3-07imb05 Firmware
Lenovo Ideacentre 5 14iab7 Firmware
Lenovo Ideacentre 5-14acn6 Firmware
Lenovo Ideacentre 5-14imb05 Firmware
Lenovo Ideacentre 5-14iob6 Firmware
Lenovo Ideacentre Creator 5-14iob6 Firmware
Lenovo Ideacentre G5-14imb05 Firmware
Lenovo Ideacentre Gaming 5 17acn7 Firmware
Lenovo Ideacentre Gaming 5 17iab7 Firmware
Lenovo Ideacentre Gaming 5-14acn6 Firmware
Lenovo Ideacentre Gaming 5-14iob6 Firmware
Lenovo Legion C530-19icb Firmware
Lenovo Legion T5-26iob6 Firmware
Lenovo Legion T5-28icb05 Firmware
Lenovo Legion T530-28apr Firmware
Lenovo Legion T530-28icb Firmware
Lenovo Legion T7-34imz5 Firmware
Lenovo Thinkcentre M60e Tiny Firmware
Lenovo Thinkcentre M625q Firmware
NA
CVE-2022-40136
An information leak vulnerability in SMI Handler used to configure platform settings over WMI in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory.
Lenovo Ideacentre C5-14imb05 Firmware
Lenovo Thinkcentre E96z Firmware
Lenovo Ideacentre 3 07iab7 Firmware
Lenovo Ideacentre 3-07imb05 Firmware
Lenovo Ideacentre 5 14iab7 Firmware
Lenovo Ideacentre 5-14acn6 Firmware
Lenovo Ideacentre 5-14imb05 Firmware
Lenovo Ideacentre 5-14iob6 Firmware
Lenovo Ideacentre Creator 5-14iob6 Firmware
Lenovo Ideacentre G5-14imb05 Firmware
Lenovo Ideacentre Gaming 5 17acn7 Firmware
Lenovo Ideacentre Gaming 5 17iab7 Firmware
Lenovo Ideacentre Gaming 5-14acn6 Firmware
Lenovo Ideacentre Gaming 5-14iob6 Firmware
Lenovo Legion C530-19icb Firmware
Lenovo Legion T5-26iob6 Firmware
Lenovo Legion T5-28icb05 Firmware
Lenovo Legion T530-28apr Firmware
Lenovo Legion T530-28icb Firmware
Lenovo Legion T7-34imz5 Firmware
Lenovo Thinkcentre M70q Gen 2 Firmware
Lenovo Thinkcentre M710t Firmware
NA
CVE-2022-40137
A buffer overflow in the WMI SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to execute arbitrary code.
Lenovo Ideacentre C5-14imb05 Firmware O4hkt3aa
Lenovo Ideacentre E96z Firmware M26kt24a
Lenovo Ideacentre 3 07iab7 Firmware M49kt1da
Lenovo Ideacentre 3-07imb05 Firmware M2vkt1fa
Lenovo Ideacentre 5 14iab7 Firmware M42kt40a
Lenovo Ideacentre 5-14acn6 Firmware O5ekt23a
Lenovo Ideacentre 5-14imb05 Firmware O4hkt3aa
Lenovo Ideacentre 5-14iob6 Firmware M3gkt38a
Lenovo Ideacentre Aio 3-22ada6 Firmware O5ckt24a
Lenovo Ideacentre Aio 3-22iil5 Firmware O56kt22a
Lenovo Ideacentre Aio 3-22itl6 Firmware O5akt31a
Lenovo Ideacentre Aio 3-24ada6 Firmware O5ckt24a
Lenovo Ideacentre Aio 3-24alc6 Firmware O5bkt24a
Lenovo Ideacentre Aio 3-24iil5 Firmware O56kt22a
Lenovo Ideacentre Aio 3-24itl6 Firmware O5akt31a
Lenovo Ideacentre Aio 3-27alc6 Firmware O5bkt24a
Lenovo Ideacentre Aio 3-27itl6 Firmware O5akt31a
Lenovo Ideacentre G5-14imb05 Firmware O4hkt3aa
Lenovo Ideacentre Gaming 5 17acn7 Firmware O5ekt23a
Lenovo Ideacentre Gaming 5 17iab7 Firmware M42kt40a
Lenovo Ideacentre Gaming 5-14acn6 Firmware O5ekt23a
Lenovo Ideacentre Gaming 5-14iob6 Firmware M3gkt38a
NA
CVE-2022-46338
g810-led 0.4.2, a LED configuration tool for Logitech Gx10 keyboards, contained a udev rule to make supported device nodes world-readable and writable, allowing any process on the system to read traffic from keyboards, including sensitive data.
G810-led Project G810-led 0.4.2
Debian Debian Linux 10.0
1 Github repository
NA
CVE-2022-36263
StreamLabs Desktop Application 1.9.0 is vulnerable to Incorrect Access Control via obs64.exe. An attacker can execute arbitrary code via a crafted .exe file.
Logitech Streamlabs Desktop 1.9.0
605
VMScore
CVE-2022-0916
An issue exists in Logitech Options. The OAuth 2.0 state parameter was not properly validated. This leaves applications vulnerable to CSRF attacks during authentication and authorization operations.
Logitech Options
614
VMScore
CVE-2022-0915
There is a Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability in Logitech Sync for Windows before 2.4.574. Successful exploitation of these vulnerabilities may escalate the permission to the system user.
Logitech Sync
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
buffer overflow
type confusion
server-side request forgery
CVE-2024-38440
CVE-2024-27801
CVE-2024-5868
CVE-2024-0582
CVE-2024-37643
CVE-2024-3105
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
4
5
NEXT »