LO
Vendor
Logitech
51
CVEs
0
On KEV
0
New 30D
Products
HH9.8
Harmony Hub Firmware
Logitech
4 CVEs0 on KEV0 new
UR6.5
Unifying Receiver Firmware
Logitech
4 CVEs0 on KEV0 new
LF6.8
Lan-w300n/pgrb Firmware
Logitech
3 CVEs0 on KEV0 new
MS6.1
Media Server
Logitech
3 CVEs0 on KEV0 new
CI–
Cordless Itouch Keyboard
Logitech
2 CVEs0 on KEV0 new
KF6.5
K360 Firmware
Logitech
2 CVEs0 on KEV0 new
LF6.5
Lan-w300n/pr5b Firmware
Logitech
2 CVEs0 on KEV0 new
LF6.5
Lan-w300n/rs Firmware
Logitech
2 CVEs0 on KEV0 new
LO8.5
Logi Options+
Logitech
2 CVEs0 on KEV0 new
OP8.8
Options+
Logitech
2 CVEs0 on KEV0 new
CU7.8
Connection Utility Software
Logitech
1 CVEs0 on KEV0 new
CF–
Cordless Freedom
Logitech
1 CVEs0 on KEV0 new
CF–
Cordless Freedom Itouch Keyboard
Logitech
1 CVEs0 on KEV0 new
CF–
Cordless Freedom Navigator
Logitech
1 CVEs0 on KEV0 new
CF–
Cordless Freedom Pro
Logitech
1 CVEs0 on KEV0 new
DM–
Desktop Manager
Logitech
1 CVEs0 on KEV0 new
GS7.8
Game Software
Logitech
1 CVEs0 on KEV0 new
IK–
Itouch Keyboard
Logitech
1 CVEs0 on KEV0 new
KF6.5
K400r Firmware
Logitech
1 CVEs0 on KEV0 new
KF6.5
K750 Firmware
Logitech
1 CVEs0 on KEV0 new
KF6.5
K830 Firmware
Logitech
1 CVEs0 on KEV0 new
LF–
Lan-w300n/ru2 Firmware
Logitech
1 CVEs0 on KEV0 new
LF6.5
Lan-wh450n/gr Firmware
Logitech
1 CVEs0 on KEV0 new
LT9.8
Logi Tune
Logitech
1 CVEs0 on KEV0 new
LO7.8
Logitech Options Plus
Logitech
1 CVEs0 on KEV0 new
MW4.4
MEVO WEBCAM APP
Logitech
1 CVEs0 on KEV0 new
OP7.8
Options Plus
Logitech
1 CVEs0 on KEV0 new
RF6.5
R500 Firmware
Logitech
1 CVEs0 on KEV0 new
RL8.8
R700 Laser Presentation Remote Firmware
Logitech
1 CVEs0 on KEV0 new
SF5.9
S120 Firmware
Logitech
1 CVEs0 on KEV0 new
SD7.3
Streamlabs Desktop
Logitech
1 CVEs0 on KEV0 new
SY7.0
Sync
Logitech
1 CVEs0 on KEV0 new
UF6.5
Unifying Firmware
Logitech
1 CVEs0 on KEV0 new
VI–
Videocall
Logitech
1 CVEs0 on KEV0 new
ZF5.9
Z120 Firmware
Logitech
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-12518 | LO Logi Options+ Logitech | 8.5 | Sep 14 | Local privilege escalation in the Logi Options+ updater service on Windows |
| CVE-2024-8258 | LO Logitech Options Plus Logitech | 7.8 | Sep 10 | Insecure Electron Fuses in Logitech Options Plus Allowing Arbitrary Code Execution on macOS |
| CVE-2024-8011 | OP Options+ Logitech | 5.5 | Aug 25 | Logitech Options+ on MacOS prior 1.72 allows a local attacker to inject dynamic library within Options+ runtime and abuse permissions granted by the user to Options+ such as… |
| CVE-2024-4031 | MW MEVO WEBCAM APP Logitech | 4.4 | Apr 23 | MEVO WEBCAM APP Windows Unquoted Service Path Vulnerability |
| CVE-2024-2537 | LT Logi Tune Logitech | 9.8 | Mar 15 | Electron Code Injection in Logi Tune macOS Application |
| CVE-2022-36263 | SD Streamlabs Desktop Logitech | 7.3 | Aug 19 | StreamLabs Desktop Application 1.9.0 is vulnerable to Incorrect Access Control via obs64.exe |
| CVE-2022-0916 | OP Options Logitech | 8.8 | May 3 | An issue was discovered in Logitech Options |
| CVE-2022-0915 | SY Sync Logitech | 7.0 | Apr 12 | There is a Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability in Logitech Sync for Windows prior to 2.4.574 |
| CVE-2021-38547 | SF S120 Firmware Logitech | 5.9 | Aug 11 | Logitech Z120 and S120 speakers through 2021-08-09 allow remote attackers to recover speech signals from an LED on the device, via a telescope and an electro-optical sensor, aka a… |
| CVE-2021-20642 | LF Lan-w300n/rs Firmware Logitech | 6.5 | Feb 12 | Improper check or handling of exceptional conditions in LOGITEC LAN-W300N/RS allows a remote attacker to cause a denial-of-service (DoS) condition by sending a specially crafted… |
| CVE-2021-20641 | LF Lan-w300n/rs Firmware Logitech | 6.5 | Feb 12 | Cross-site request forgery (CSRF) vulnerability in LOGITEC LAN-W300N/RS allows remote attackers to hijack the authentication of administrators via a specially crafted URL |
| CVE-2021-20640 | LF Lan-w300n/pgrb Firmware Logitech | 6.8 | Feb 12 | Buffer overflow vulnerability in LOGITEC LAN-W300N/PGRB allows an attacker with administrative privilege to execute an arbitrary OS command via unspecified vectors |
| CVE-2021-20639 | LF Lan-w300n/pgrb Firmware Logitech | 6.8 | Feb 12 | LOGITEC LAN-W300N/PGRB allows an attacker with administrative privilege to execute arbitrary OS commands via unspecified vectors |
| CVE-2021-20638 | LF Lan-w300n/pgrb Firmware Logitech | 6.8 | Feb 12 | LOGITEC LAN-W300N/PGRB allows an attacker with administrative privilege to execute arbitrary OS commands via unspecified vectors |
| CVE-2021-20637 | LF Lan-w300n/pr5b Firmware Logitech | 6.5 | Feb 12 | Improper check or handling of exceptional conditions in LOGITEC LAN-W300N/PR5B allows a remote attacker to cause a denial-of-service (DoS) condition by sending a specially crafted… |
| CVE-2021-20636 | LF Lan-w300n/pr5b Firmware Logitech | 6.5 | Feb 12 | Cross-site request forgery (CSRF) vulnerability in LOGITEC LAN-W300N/PR5B allows remote attackers to hijack the authentication of administrators via a specially crafted URL |
| CVE-2021-20635 | LF Lan-wh450n/gr Firmware Logitech | 6.5 | Feb 12 | Improper restriction of excessive authentication attempts in LOGITEC LAN-WH450N/GR allows an attacker in the wireless range of the device to recover PIN and access the network |
| CVE-2019-13055 | UR Unifying Receiver Firmware Logitech | 6.5 | Jun 29 | Certain Logitech Unifying devices allow attackers to dump AES keys and addresses, leading to the capability of live decryption of Radio Frequency transmissions, as demonstrated by… |
| CVE-2019-13054 | RF R500 Firmware Logitech | 6.5 | Jun 29 | The Logitech R500 presentation clicker allows attackers to determine the AES key, leading to keystroke injection |
| CVE-2019-13053 | UR Unifying Receiver Firmware Logitech | 6.5 | Jun 29 | Logitech Unifying devices allow keystroke injection, bypassing encryption |
| CVE-2019-13052 | UR Unifying Receiver Firmware Logitech | 6.5 | Jun 29 | Logitech Unifying devices allow live decryption if the pairing of a keyboard to a receiver is sniffed |
| CVE-2016-10761 | KF K400r Firmware Logitech | 6.5 | Jun 29 | Logitech Unifying devices before 2016-02-26 allow keystroke injection, bypassing encryption, aka MouseJack |
| CVE-2019-12506 | RL R700 Laser Presentation Remote Firmware Logitech | 8.8 | Jun 7 | Due to unencrypted and unauthenticated data communication, the wireless presenter Logitech R700 Laser Presentation Remote R-R0010 is prone to keystroke injection attacks |
| CVE-2018-15723 | HH Harmony Hub Firmware Logitech | 9.8 | Dec 20 | The Logitech Harmony Hub before version 4.15.206 is vulnerable to application level command injection via crafted HTTP request |
| CVE-2018-15722 | HH Harmony Hub Firmware Logitech | 8.1 | Dec 20 | The Logitech Harmony Hub before version 4.15.206 is vulnerable to OS command injection via the time update request |
| CVE-2018-15721 | HH Harmony Hub Firmware Logitech | 9.8 | Dec 20 | The XMPP server in Logitech Harmony Hub before version 4.15.206 is vulnerable to authentication bypass via a crafted XMPP request |
| CVE-2018-15720 | HH Harmony Hub Firmware Logitech | 9.8 | Dec 20 | Logitech Harmony Hub before version 4.15.206 contained two hard-coded accounts in the XMPP server that gave remote users access to the local API |
| CVE-2018-0621 | CU Connection Utility Software Logitech | 7.8 | Jul 26 | Untrusted search path vulnerability in LOGICOOL CONNECTION UTILITY SOFTWARE versions before 2.30.9 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified… |
| CVE-2018-0620 | GS Game Software Logitech | 7.8 | Jul 26 | Untrusted search path vulnerability in LOGICOOL Game Software versions before 8.87.116 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory |
| CVE-2017-16568 | MS Media Server Logitech | 5.4 | Nov 10 | Persistent Cross-Site Scripting (XSS) vulnerability in Logitech Media Server 7.9.0, affecting the "Radio" functionality |
| CVE-2017-16567 | MS Media Server Logitech | 5.4 | Nov 10 | Persistent Cross-Site Scripting (XSS) vulnerability in Logitech Media Server 7.9.0, affecting the "Favorites" feature |
| CVE-2017-15687 | MS Media Server Logitech | 6.1 | Oct 23 | DOM Based Cross Site Scripting (XSS) exists in Logitech Media Server 7.7.1, 7.7.2, 7.7.3, 7.7.5, 7.7.6, 7.9.0, and 7.9.1 via a crafted URI |
| CVE-2016-6257 | UF Unifying Firmware Logitech | 6.5 | Aug 2 | The firmware in Lenovo Ultraslim dongles, as used with Lenovo Liteon SK-8861, Ultraslim Wireless, and Silver Silk keyboards and Liteon ZTM600 and Ultraslim Wireless mice, does not… |
| CVE-2012-1250 | LF Lan-w300n/ru2 Firmware Logitech | – | Jun 4 | Logitec LAN-W300N/R routers with firmware before 2.27 do not properly restrict login access, which allows remote attackers to obtain administrative privileges and modify settings… |
| CVE-2008-0956 | DM Desktop Manager Logitech | – | Jun 12 | Multiple stack-based buffer overflows in the BackWeb Lite Install Runner ActiveX control in the BackWeb Web Package ActiveX object in LiteInstActivator.dll in BackWeb before… |
| CVE-2007-2918 | VI Videocall Logitech | – | Jun 1 | Multiple stack-based buffer overflows in ActiveX controls (1) VibeC in (a) vibecontrol.dll, (2) CallManager and (3) ViewerClient in (b) StarClient.dll, (4) ComLink in (c)… |
| CVE-2002-1722 | CF Cordless Freedom Itouch Keyboard Logitech | – | Dec 31 | Logitech iTouch keyboards allows attackers with physical access to the system to bypass the screen locking function and execute user-defined commands that have been assigned to a… |
| CVE-2001-0737 | CF Cordless Freedom Logitech | – | Oct 18 | A long 'synch' delay in Logitech wireless mice and keyboard receivers allows a remote attacker to hijack connections via a man-in-the-middle attack |