37 matches found
CVE-2026-80782
A flaw was found in the Magic Mouse Human Interface Device HID driver within the Linux kernel. When the hidinputconnect function fails to register an input device, the driver may continue to use a pointer to memory that has already been released. This use-after-free vulnerability can lead to syst...
Astra Linux – Vulnerability in Linux
In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: fix NULL dereferencing on disconnection Commit 9d7b18668956 “HID: magicmouse: add support for Apple Magic Trackpad 2” added a sanity check for an Apple trackpad. If the check fails, it returns success instead of...
CVE-2026-80782
CVE-2026-80782 is a use-after-free vulnerability in the Linux kernel's HID magicmouse driver (used by Apple USB Magic Mouse 2 / Magic Trackpad 2). The root cause is that magicmouse_input_mapping() caches the input_dev pointer in msc->input during report descriptor parsing. On the hidinput_conn...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: Do not cause a crash when the msc-input field is missing. Fake USB devices can send their own report descriptors, for which the inputmapping hook is not called. In this case, msc-input remains NULL, leading to a...
SUSE CVE-2026-43140
In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: Do not crash on missing msc-input Fake USB devices can send their own report descriptors for which the inputmapping hook does not get called. In this case, msc-input stays NULL, leading to a crash at a later time...
EUVD-2026-27703
In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: Do not crash on missing msc-input Fake USB devices can send their own report descriptors for which the inputmapping hook does not get called. In this case, msc-input stays NULL, leading to a crash at a later time...
CVE-2026-43140 HID: magicmouse: Do not crash on missing msc->input
In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: Do not crash on missing msc-input Fake USB devices can send their own report descriptors for which the inputmapping hook does not get called. In this case, msc-input stays NULL, leading to a crash at a later time...
Linux Kernel Security Vulnerabilities
The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the lack of handling of msc-input in the HID MagicMouse, potentially leading to crashes...
CVE-2020-36936
Magic Mouse 2 Utilities 2.20 contains an unquoted service path vulnerability in its Windows service configuration. Attackers can exploit the unquoted path to inject malicious executables and gain elevated system privileges by placing a malicious file in the service path...
CVE-2020-36936 Magic Mouse 2 utilities 2.20 - 'magicmouse2service' Unquoted Service Path
Magic Mouse 2 Utilities 2.20 contains an unquoted service path vulnerability in its Windows service configuration. Attackers can exploit the unquoted path to inject malicious executables and gain elevated system privileges by placing a malicious file in the service path...
CVE-2020-36936 Magic Mouse 2 utilities 2.20 - 'magicmouse2service' Unquoted Service Path
Magic Mouse 2 Utilities 2.20 contains an unquoted service path vulnerability in its Windows service configuration. Attackers can exploit the unquoted path to inject malicious executables and gain elevated system privileges by placing a malicious file in the service path...
CVE-2020-36936
CVE-2020-36936 affects Magic Mouse 2 Utilities 2.20. It describes an unquoted service path in the Windows service configuration for the magicmouse2service, enabling an attacker to place a malicious file in the service path to gain elevated privileges. The provided documents do not specify a patch...
CVE-2020-36936
Magic Mouse 2 Utilities 2.20 contains an unquoted service path vulnerability in its Windows service configuration. Attackers can exploit the unquoted path to inject malicious executables and gain elevated system privileges by placing a malicious file in the service path...
CVE-2020-36936: Unquoted Search Path or Element
Magic Mouse 2 Utilities 2.20 contains an unquoted service path vulnerability in its Windows service configuration. Attackers can exploit the unquoted path to inject malicious executables and gain elevated system privileges by placing a malicious file in the service path...
Magic Utilities, Magic Mouse 2 Utilities – Code-related issues and vulnerabilities
Magic Utilities Magic Mouse 2 Utilities is a mouse-function-enhancing software developed by the Australian company Magic Utilities. Version 2.20 of Magic Utilities Magic Mouse 2 Utilities contains a code vulnerability; this vulnerability stems from the service path not being enclosed in quotes,...
PT-2026-4654
Magic Mouse 2 Utilities 2.20 contains an unquoted service path vulnerability in its Windows service configuration. Attackers can exploit the unquoted path to inject malicious executables and gain elevated system privileges by placing a malicious file in the service path...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001078)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001078 advisory. Multiple stack-based buffer overflows in the magicmouserawevent function in drivers/hid/hid-magicmouse.c in the Magic Mouse HID driver in the Linux kernel through...
PT-2026-37480
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A crash can occur when fake USB devices impersonating a magic mouse send their own report descriptors. This prevents the input mapping hook from being called, leaving the msc-input...
Apple Magic Keyboard Security Flaw
The Apple Magic Keyboard is a wireless keyboard from Apple, Inc. A security vulnerability exists in Apple Magic Keyboard, which stems from a session management issue that allows an attacker with access to the physical accessory to extract its Bluetooth pairing key and monitor Bluetooth...
