What’s Vulnerable › Vulnerabilities

CVE-2016-10761

• Severity: medium (CVSS 6.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-06-29 · updated 2026-06-17
• Weakness: CWE-74

Description

Logitech Unifying devices before 2016-02-26 allow keystroke injection, bypassing encryption, aka MouseJack.

Affected products

• Logitech K360 Firmware: all versions
• Logitech K400R Firmware: all versions
• Logitech K750 Firmware: all versions
• Logitech K830 Firmware: all versions
• Logitech Unifying Receiver Firmware: 012.001.00019, 012.003.00025

References

• https://github.com/BastilleResearch/mousejack/blob/master/doc/advisories/bastille-2.logitech.public.txt
• https://www.kb.cert.org/vuls/id/981271
• https://github.com/BastilleResearch/mousejack/blob/master/doc/advisories/bastille-2.logitech.public.txt
• https://www.kb.cert.org/vuls/id/981271

Get alerted when CVE-2016-10761 or the next vulnerability affects your stack