MediumCVSS 6.8
EPSS 0.59%
LastPass prior to 2.5.1 has an insecure PIN implementation.
Vendor
logmein vulnerabilities
5 published CVES affecting logmein, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 5
- Critical
- 0
- High
- 3
- Medium
- 2
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Products
Latest logmein CVEs
Newest publication first
-
-
MediumCVSS 6.1 EPSS 0.59%
LastPass prior to 2.5.1 allows secure wipe bypass.
-
HighCVSS 8.2 EPSS 1.2%
LogMeIn LastPass before 4.33.0 allows attackers to construct a crafted web site that captures the credentials for a victim's account on a previously visited web site, because do_popupregister can be bypassed via clickjacking.
-
HighCVSS 7.5 EPSS 4.7%
LogMeIn LastPass through 4.15.0 allows remote attackers to cause a denial of service (browser hang) via an HTML document because the resource consumption of onloadwff.js grows with the number of INPUT elements.
-
HighCVSS 9.3 EPSS 6.5% PoC
LogMeIn Remote Access Utility ActiveX control (RACtrl.dll) allows remote attackers to cause a denial of service (crash) by setting the fgcolor and bgcolor properties to certain long values that trigger memory corruption.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.