CVE-2024-45418
Zoom Apps for macOS - Symbolic Link Following
- State
- Published
- Severity
- 5.4 Medium
- Published
- Feb 25, 2025
- Updated
- Feb 25, 2025
- Reserved
- Aug 28, 2024
Description
Symlink following in the installer for some Zoom apps for macOS before version 6.1.5 may allow an authenticated user to conduct an escalation of privilege via network access.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 5.4 Medium | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N | Zoom |
Weaknesses
- CWE-61 UNIX Symbolic Link (Symlink) Following
Affected Products
| Product | Versions |
|---|---|
Zoom Apps for macOSZoom Communications, Inc |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.