DeutschShown in its original language — a full translation is planned for a future version.
Zoom Video Communications Zoom Client und Rooms: Mehrere Schwachstellen
view advisory published 2024-07-09
Ein entfernter, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Zoom Video Communications Zoom Client und Rooms ausnutzen, um einen Denial of Service Angriff durchzuführen, erhöhte Rechte zu erlangen und vertrauliche Informationen offenzulegen.
01
describes (8)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-39827US | — | — | ||
Improper input validation in the installer for Zoom Workplace Desktop App for Windows before version 6.0.10 may allow an authenticated user to conduct a denial of service via local… | ||||
| CVE-2024-39826US | — | — | ||
Race condition in Team Chat for some Zoom Workplace Apps and SDKs for Windows may allow an authenticated user to conduct information disclosure via network access. | ||||
| CVE-2024-39821US | medium4.4 | — | ||
Race condition in the installer for Zoom Workplace App for Windows and Zoom Rooms App for Windows may allow an authenticated user to conduct a denial of service via local access. | ||||
| CVE-2024-39820US | medium5.0 | — | ||
Uncontrolled search path element in the installer for Zoom Workplace Desktop App for macOS before version 6.0.10 may allow an authenticated user to conduct a denial of service via… | ||||
| CVE-2024-39819US | high7.3OT elevated | — | ||
Integrity check in the installer for some Zoom Workplace Apps and SDKs for Windows may allow an authenticated user to conduct a privilege escalation via local access. | ||||
| CVE-2024-27241US | high7.5 | — | ||
Improper input validation in some Zoom Apps and SDKs may allow an authenticated user to conduct a denial of service via network access. | ||||
| CVE-2024-27240US | high7.8 | — | ||
Improper input validation in the installer for some Zoom Apps for Windows may allow an authenticated user to conduct a privilege escalation via local access. | ||||
| CVE-2024-27238US | medium6.3 | — | ||
Race condition in the installer for some Zoom Apps and SDKs for Windows before version 6.0.0 may allow an authenticated user to conduct a privilege escalation via local access. | ||||
02
references
External citations — patches, advisories, analysis.
- WID-SEC-W-2024-1553 - CSAF Versionself
- WID-SEC-2024-1553 - Portal Versionself
- Zoom Security Bulletin ZSB-24019 vom 2024-07-09external
- Zoom Security Bulletin ZSB-24020 vom 2024-07-09external
- Zoom Security Bulletin ZSB-24021 vom 2024-07-09external
- Zoom Security Bulletin ZSB-24023 vom 2024-07-09external
- Zoom Security Bulletin ZSB-24024 vom 2024-07-09external
- Zoom Security Bulletin ZSB-24026 vom 2024-07-09external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan