CVE-2024-42440

Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS, Zoom Rooms Client for macOS - Improper Privilege Management

State: Published
Severity: 6.2 Medium
Published: Aug 14, 2024
Updated: Aug 14, 2024
Reserved: Aug 1, 2024

Read the record on cve.org

Description

Improper privilege management in the installer for Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS and Zoom Rooms Client for macOS before 6.1.5 may allow a privileged user to conduct an escalation of privilege via local access.

Scores

CVSS	Score	Vector	Source
3.1	6.2 Medium	CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H	Zoom

Weaknesses

CWE-269 Improper Privilege Management

Affected Products

Product	Versions
Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS, Zoom Rooms Client for macOSZoom Communications Inc.	before version 6.1.5Affected

References

https://www.zoom.com/en/trust/security-bulletin/zsb-24034

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.