DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Zoom Video Communications Zoom Client und Rooms: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2024-07-09
Ein entfernter, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Zoom Video Communications Zoom Client und Rooms ausnutzen, um einen Denial of Service Angriff durchzuführen, erhöhte Rechte zu erlangen und vertrauliche Informationen offenzulegen.
01
beschreibt (8)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-39827US | — | — | ||
Improper input validation in the installer for Zoom Workplace Desktop App for Windows before version 6.0.10 may allow an authenticated user to conduct a denial of service via local… | ||||
| CVE-2024-39826US | — | — | ||
Race condition in Team Chat for some Zoom Workplace Apps and SDKs for Windows may allow an authenticated user to conduct information disclosure via network access. | ||||
| CVE-2024-39821US | medium4.4 | — | ||
Race condition in the installer for Zoom Workplace App for Windows and Zoom Rooms App for Windows may allow an authenticated user to conduct a denial of service via local access. | ||||
| CVE-2024-39820US | medium5.0 | — | ||
Uncontrolled search path element in the installer for Zoom Workplace Desktop App for macOS before version 6.0.10 may allow an authenticated user to conduct a denial of service via… | ||||
| CVE-2024-39819US | high7.3OT erhöht | — | ||
Integrity check in the installer for some Zoom Workplace Apps and SDKs for Windows may allow an authenticated user to conduct a privilege escalation via local access. | ||||
| CVE-2024-27241US | high7.5 | — | ||
Improper input validation in some Zoom Apps and SDKs may allow an authenticated user to conduct a denial of service via network access. | ||||
| CVE-2024-27240US | high7.8 | — | ||
Improper input validation in the installer for some Zoom Apps for Windows may allow an authenticated user to conduct a privilege escalation via local access. | ||||
| CVE-2024-27238US | medium6.3 | — | ||
Race condition in the installer for some Zoom Apps and SDKs for Windows before version 6.0.0 may allow an authenticated user to conduct a privilege escalation via local access. | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- WID-SEC-W-2024-1553 - CSAF Versionself
- WID-SEC-2024-1553 - Portal Versionself
- Zoom Security Bulletin ZSB-24019 vom 2024-07-09external
- Zoom Security Bulletin ZSB-24020 vom 2024-07-09external
- Zoom Security Bulletin ZSB-24021 vom 2024-07-09external
- Zoom Security Bulletin ZSB-24023 vom 2024-07-09external
- Zoom Security Bulletin ZSB-24024 vom 2024-07-09external
- Zoom Security Bulletin ZSB-24026 vom 2024-07-09external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan