{"items":[{"id":"CVE-2026-12518","published":"2026-09-14T07:27:36.817Z","updated":"2026-09-14T10:46:16.198Z","title":"Local privilege escalation in the Logi Options+ updater service on Windows","severity":"HIGH","score":8.5,"vendor":"Logitech","product":"Logi Options+","kev":false,"epss":0.00143,"kevAdded":null},{"id":"CVE-2024-8258","published":"2024-09-10T08:36:34.326Z","updated":"2024-09-10T13:56:50.325Z","title":"Insecure Electron Fuses in Logitech Options Plus Allowing Arbitrary Code Execution on macOS","severity":"LOW","score":2,"vendor":"Logitech","product":"Logitech Options Plus","kev":false,"epss":0.00393,"kevAdded":null},{"id":"CVE-2024-8011","published":"2024-08-25T11:44:45.839Z","updated":"2024-08-26T15:28:33.495Z","title":"Logitech Options+ on MacOS prior 1.72 allows a local attacker to inject dynamic library within Options+ runtime and abuse permissions granted by the user to…","severity":"LOW","score":2,"vendor":"Logitech","product":"Options+","kev":false,"epss":0.00126,"kevAdded":null},{"id":"CVE-2024-4031","published":"2024-04-23T06:29:58.858Z","updated":"2024-08-01T20:26:57.253Z","title":"MEVO WEBCAM APP Windows Unquoted Service Path Vulnerability","severity":"MEDIUM","score":4.4,"vendor":"Logitech","product":"MEVO WEBCAM APP","kev":false,"epss":0.00229,"kevAdded":null},{"id":"CVE-2024-2537","published":"2024-03-15T17:12:10.804Z","updated":"2024-08-01T19:18:46.975Z","title":"Electron Code Injection in Logi Tune macOS Application","severity":"MEDIUM","score":4.4,"vendor":"Logitech","product":"Logi Tune","kev":false,"epss":0.00278,"kevAdded":null},{"id":"CVE-2022-0916","published":"2022-05-03T13:40:09.127Z","updated":"2024-09-17T02:26:48.928Z","title":"Broken authentication on Logitech Options due to misvalidation of Oauth state parameter","severity":"HIGH","score":8.4,"vendor":"Logitech","product":"Options","kev":false,"epss":0.0045,"kevAdded":null},{"id":"CVE-2022-0915","published":"2022-04-12T18:35:09.413Z","updated":"2024-09-16T18:35:00.585Z","title":"Logitech Sync desktop application prior to 2.4.574 - TOCTOU during installation leads to privelege escalation","severity":"MEDIUM","score":6,"vendor":"Logitech","product":"Sync","kev":false,"epss":0.00175,"kevAdded":null},{"id":"CVE-2018-15723","published":"2018-12-20T21:00:00.000Z","updated":"2024-09-17T02:10:50.517Z","title":"The Logitech Harmony Hub before version 4.15.206 is vulnerable to application level command injection via crafted HTTP request. An unauthenticated remote…","severity":"CRITICAL","score":9.8,"vendor":"Logitech","product":"Logitech Harmony Hub","kev":false,"epss":0.03699,"kevAdded":null},{"id":"CVE-2018-15722","published":"2018-12-20T21:00:00.000Z","updated":"2024-09-17T02:42:06.972Z","title":"The Logitech Harmony Hub before version 4.15.206 is vulnerable to OS command injection via the time update request. A remote server or man in the middle can…","severity":"HIGH","score":8.1,"vendor":"Logitech","product":"Logitech Harmony Hub","kev":false,"epss":0.01643,"kevAdded":null},{"id":"CVE-2018-15721","published":"2018-12-20T21:00:00.000Z","updated":"2024-09-17T02:26:25.523Z","title":"The XMPP server in Logitech Harmony Hub before version 4.15.206 is vulnerable to authentication bypass via a crafted XMPP request. Remote attackers can use…","severity":"CRITICAL","score":9.8,"vendor":"Logitech","product":"Logitech Harmony Hub","kev":false,"epss":0.01825,"kevAdded":null},{"id":"CVE-2018-15720","published":"2018-12-20T21:00:00.000Z","updated":"2024-09-16T20:59:02.021Z","title":"Logitech Harmony Hub before version 4.15.206 contained two hard-coded accounts in the XMPP server that gave remote users access to the local API.","severity":"CRITICAL","score":9.8,"vendor":"Logitech","product":"Logitech Harmony Hub","kev":false,"epss":0.01495,"kevAdded":null}]}