Logitech vulnerabilities

CVEs per yearBy the year they were published

1. 20184
2. 20222
3. 20244
4. 20261

Newest CVEs

• CVE-2026-12518

  Local privilege escalation in the Logi Options+ updater service on Windows

  Logitech · Logi Options+

  High8.5
• CVE-2024-8258

  Insecure Electron Fuses in Logitech Options Plus Allowing Arbitrary Code Execution on macOS

  Logitech · Logitech Options Plus

  Low2.0
• CVE-2024-8011

  Logitech Options+ on MacOS prior 1.72 allows a local attacker to inject dynamic library within Options+ runtime and abuse permissions granted by the user to…

  Logitech · Options+

  Low2.0
• CVE-2024-4031

  MEVO WEBCAM APP Windows Unquoted Service Path Vulnerability

  Logitech · MEVO WEBCAM APP

  Medium4.4
• CVE-2024-2537

  Electron Code Injection in Logi Tune macOS Application

  Logitech · Logi Tune

  Medium4.4
• CVE-2022-0916

  Broken authentication on Logitech Options due to misvalidation of Oauth state parameter

  Logitech · Options

  High8.4
• CVE-2022-0915

  Logitech Sync desktop application prior to 2.4.574 - TOCTOU during installation leads to privelege escalation

  Logitech · Sync

  Medium6.0
• CVE-2018-15723

  The Logitech Harmony Hub before version 4.15.206 is vulnerable to application level command injection via crafted HTTP request. An unauthenticated remote…

  Logitech · Logitech Harmony Hub

  Critical9.8
• CVE-2018-15722

  The Logitech Harmony Hub before version 4.15.206 is vulnerable to OS command injection via the time update request. A remote server or man in the middle can…

  Logitech · Logitech Harmony Hub

  High8.1
• CVE-2018-15721

  The XMPP server in Logitech Harmony Hub before version 4.15.206 is vulnerable to authentication bypass via a crafted XMPP request. Remote attackers can use…

  Logitech · Logitech Harmony Hub

  Critical9.8