CVE-2022-45481: Lzmouse Lazy Mouse

Critical severity, CVSS 9.8. EPSS: 1.8% chance of exploitation in the next 30 days.

The default configuration of Lazy Mouse does not require a password, allowing remote unauthenticated users to execute arbitrary code with no prior authorization or authentication. CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

• Lzmouse Lazy Mouse: up to and including 2.0.1

Published 2022-12-05. Last modified 2026-06-17.