CVE-2010-1184: The Microsoft wireless keyboard uses XOR encryption with a key derived from the MAC address, which makes it...

Security readout for executives and security teams

CVE-2010-1184 describes weak encryption in a Microsoft wireless keyboard. Keystrokes could be read, and commands could be injected, by an attacker close enough to communicate wirelessly. The practical risk is highest where older Microsoft wireless keyboards are still used for sensitive workstations. Exposure is limited to environments still using the affected class of Microsoft wireless keyboards. Risk requires attacker proximity to the keyboard’s wireless signal. Exact models and versions are not specified in the provided sources, so asset confirmation may require physical inventory and vendor documentation. Treat this as a targeted physical-proximity risk, not an internet-wide emergency. Prioritize replacement where sensitive credentials, privileged access, or confidential data entry occurs. Because the affected models are unclear, the fastest control is inventory and removal from critical workstations. Mitigation focus: Identify and remove potentially affected Microsoft wireless keyboards from sensitive environments.; Prefer wired keyboards or modern wireless keyboards with documented strong encryption.; Check Microsoft or device vendor guidance for model-specific replacement or mitigation advice..

Prepared

Jun 28, 2026, 06:15 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.