CVE-2024-42441

Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS, Zoom Rooms Client for macOS - Incorrect Privilege Assignment

State: Published
Severity: 6.2 Medium
Published: Aug 14, 2024
Updated: Oct 7, 2025
Reserved: Aug 1, 2024

Read the record on cve.org

Description

Incorrect privilege assignment in the installer for Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS and Zoom Rooms Client for macOS before 6.1.5 may allow a privileged user to conduct an escalation of privilege via local access.

Scores

CVSS	Score	Vector	Source
3.1	6.2 Medium	CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H	Zoom

Weaknesses

CWE-266 [LLM] Incorrect Privilege Assignment

Affected Products

Product	Versions
Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS, Zoom Rooms Client for macOSZoom Communications Inc.	before version 6.1.5Affected

References

https://www.zoom.com/en/trust/security-bulletin/zsb-24034

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.