Logmein Lastpass — known CVE vulnerabilities

Every CVE whose affected-product data names Logmein Lastpass, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2019-16371 — CVSS 8.2 (high): LogMeIn LastPass before 4.33.0 allows attackers to construct a crafted web site that captures the credentials for a victim's account on a…
• CVE-2018-10193 — CVSS 7.5 (high): LogMeIn LastPass through 4.15.0 allows remote attackers to cause a denial of service (browser hang) via an HTML document because the…
• CVE-2013-5113 — CVSS 6.8 (medium): LastPass prior to 2.5.1 has an insecure PIN implementation.
• CVE-2013-5114 — CVSS 6.1 (medium): LastPass prior to 2.5.1 allows secure wipe bypass.
• CVE-2020-35207 — CVSS 5.7 (medium): An issue was discovered in the LogMein LastPass Password Manager (aka com.lastpass.ilastpass) app 4.8.11.2403 for iOS. The PIN…
• CVE-2020-35208 — CVSS 5.7 (medium): An issue was discovered in the LogMein LastPass Password Manager (aka com.lastpass.ilastpass) app 4.8.11.2403 for iOS. The password…