Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-76087
HistorySep 29, 2021 - 12:00 a.m.

Zoom Plugin Code Execution Vulnerability

2021-09-2900:00:00
China National Vulnerability Database
www.cnvd.org.cn
6

0.001 Low

EPSS

Percentile

42.9%

Zoom Plugin is a plug-in from Zoom (ZOOM), Inc. A security vulnerability exists in previous versions of Zoom Plugin for Microsoft Outlook for MacOS 5.3.52553.0918, which stems from a Time of Check Use (TOC TOU) vulnerability included in the plug-in installation process. An attacker could exploit this vulnerability to write their own malicious application to the plug-in directory, allowing the malicious application to execute in a privileged context.

0.001 Low

EPSS

Percentile

42.9%

Related for CNVD-2021-76087