Search Results (3 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2022-0916 1 Logitech 1 Options 2024-11-21 8.4 High
An issue was discovered in Logitech Options. The OAuth 2.0 state parameter was not properly validated. This leaves applications vulnerable to CSRF attacks during authentication and authorization operations.
CVE-2024-8258 2 Apple, Logitech 3 Macos, Logi Options\+, Options Plus 2024-09-27 7.8 High
Improper Control of Generation of Code ('Code Injection') in Electron Fuses in Logitech Options Plus version 1.60.496306 on macOS allows attackers to execute arbitrary code via insecure Electron Fuses configuration.
CVE-2024-8011 1 Logitech 1 Options\+ 2024-09-11 5.5 Medium
Logitech Options+ on MacOS prior 1.72 allows a local attacker to inject dynamic library within Options+ runtime and abuse permissions granted by the user to Options+ such as Camera.