Lucene search

CVE-2024-24691 Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows - Improper Input Validation

🗓️ 14 Feb 2024 00:30:01Reported by ZoomType

Improper Input Validation in Zoom Products Might Allow Unauthorized Privilege Escalatio

Reporter	Title	Published	Views	Family All 7
Tenable Nessus	Zoom VDI Meeting Client < 5.16.10 Vulnerability (ZSB-24008)	20 Feb 202400:00	–	nessus
Tenable Nessus	Zoom Client for Meetings < 5.16.5 Vulnerability (ZSB-24008)	20 Feb 202400:00	–	nessus
Hive Pro Threat Advisories	Critical Flaw in Zoom Windows Apps Allows Privilege Elevation	15 Feb 202413:48	–	hivepro
Prion	Input validation	14 Feb 202400:15	–	prion
NVD	CVE-2024-24691	14 Feb 202400:15	–	nvd
CVE	CVE-2024-24691	14 Feb 202400:15	–	cve
OpenVAS	Zoom Client < 5.16.5 Multiple Vulnerabilities (ZSB-23059, ZSB-23062, ZSB-24006, ZSB-24007, ZSB-24008) - Windows	21 Dec 202300:00	–	openvas

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Windows"
    ],
    "product": "Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows",
    "vendor": "Zoom Video Communications, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "see references"
      }
    ]
  }
]

Source	Link
zoom	www.zoom.com/en/trust/security-bulletin/ZSB-24008/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

14 Feb 2024 00:01Current

9.9High risk

Vulners AI Score9.9

CVSS39.6

EPSS0.001

CWE-176