CVE-2024-8258 LOW

CVE-2024-8258: Insecure Electron Fuses in Logitech Options Plus Allowing Arbitrary Code Execution on macOS

Vendor Logitech
Product Logitech Options Plus
Weakness CWE-94 · Code injection
Published September 10, 2024
Last update September 10, 2024
View on NVD All CVEs

CVSS base score

2.0/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:L/SA:L/AU:Y/R:U

What the vulnerability does

01Description

Improper Control of Generation of Code ('Code Injection') in Electron Fuses in Logitech Options Plus version 1.60.496306 on macOS allows attackers to execute arbitrary code via insecure Electron Fuses configuration.

Key dates

02Disclosure timeline

September 10, 2024 CVE published
September 10, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-30960 RSSN has Arbitrary Code Execution via Unvalidated JIT Instruction Generation in C-FFI Interface CVE-2026-39337 ChurchCRM Affected by Unauthenticated RCE in Install Wizard CVE-2025-13035 Code Snippets <= 3.9.1 - Authenticated (Contributor+) PHP Code Injection via extract() and PHP Filter Chains CVE-2025-54550 Apache Airflow: RCE by race condition in example_xcom dag CVE-2026-3309 Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress <= 4.16.11 - Unauthenticated Arbitrary Shortcode Execution via Checkout Billing Fields