WID-SEC-W-2024-0385

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Zoom Video Communications Zoom Client: Mehrere Schwachstellen

view advisory published 2024-02-13

Ein Angreifer kann mehrere Schwachstellen in Zoom Video Communications Zoom Client ausnutzen, um einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen offenzulegen oder seine Berechtigungen zu erweitern.

01

describes (7)

Related CVEs.

IDseverity exploitable
CVE-2024-24699USmedium6.5—
Business logic error in some Zoom clients may allow an authenticated user to conduct information disclosure via network access.
CVE-2024-24698USmedium4.4—
Improper authentication in some Zoom clients may allow a privileged user to conduct a disclosure of information via local access.
CVE-2024-24697UShigh7.8—
Untrusted search path in some Zoom 32 bit Windows clients may allow an authenticated user to conduct an escalation of privilege via local access.
CVE-2024-24696USmedium6.5—
Improper input validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an authenticated user to conduct a disclosure…
CVE-2024-24695USmedium6.5—
Improper input validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an authenticated user to conduct a disclosure…
CVE-2024-24691UScritical9.8—
Improper input validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an unauthenticated user to conduct an escalati…
CVE-2024-24690USmedium6.5—
Improper input validation in some Zoom clients may allow an authenticated user to conduct a denial of service via network access.
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan