CVE-2024-8258CWE-94

Insecure Electron Fuses in Logitech Options Plus Allowing Arbitrary Code Execution on macOS

Low · published September 10, 2024

CVSS v4.0
2.0
EPSS
0%
Percentile
32.3
In the wild
Unconfirmed
What it is

Improper Control of Generation of Code ('Code Injection') in Electron Fuses in Logitech Options Plus version 1.60.496306 on macOS allows attackers to execute arbitrary code via insecure Electron Fuses configuration.

The record
Technical detail
CVSS v4.0
2.0 · LOW
Vector
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:L/SA:L/AU:Y/R:U
EPSS
0.00393 · 32.3th percentile
Weakness
CWE-94 · Improper Control of Generation of Code ('Code Injection')
Published
2024-09-10T08:36Z
EPSS history
Timeline
  • 10 SEP 08:36Z
    Insecure Electron Fuses in Logitech Options Plus Allowing Arbitrary Code Execution on macOS
    cvelistv5