Skip to content
OpenAdvisories
Medium · 6.0 CVE-2022-0915 EUVD-2022-15942GHSA-gjm2-49fm-q537

Logitech Sync desktop application prior to 2.4.574 - TOCTOU during installation leads to privelege escalation

Published Apr 12, 2022 · Updated Sep 16, 2024 · Assigned by Logitech

Description

There is a Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability in Logitech Sync for Windows prior to 2.4.574. Successful exploitation of these vulnerabilities may escalate the permission to the system user.

Affected products

VendorProductAffectedFixed
Logitech Sync prior to 2.4.574 – < 2.4.574 2.4.574

References