CVE-2024-39826
Zoom Workplace Apps and SDKs - Path traversal
- State
- Published
- Severity
- 6.8 Medium
- Published
- Jul 15, 2024
- Updated
- Oct 2, 2025
- Reserved
- Jun 28, 2024
Description
Race condition in Team Chat for some Zoom Workplace Apps and SDKs for Windows may allow an authenticated user to conduct information disclosure via network access.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 6.8 Medium | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N | Zoom |
Weaknesses
- CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition
Affected Products
| Product | Versions |
|---|---|
Zoom Workplace Apps and SDKsZoom Communications, Inc |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.