CVE-2024-42439

Untrusted search path in the installer for Zoom Workplace Desktop App for macOS and Zoom Meeting SDK for macOS before 6.1.0 may allow a privileged user to conduct an escalation of privilege via local access.

Score

CVSS 3.1 6.5 Medium

Status

Analyzed - security@zoom.us

Published

2024-08-14

Last modified

2024-08-16

Weaknesses

CWE-426

Affected products

• Meeting Software Development Kit (Zoom)
• Workplace Desktop (Zoom)
• Zoom Workplace Desktop App For Macos And Zoom Meeting Sdk For Macos (Zoom Communications Inc.)

References

• https://www.zoom.com/en/trust/security-bulletin/zsb-24032