Lucene search
ZoomCVELIST:CVE-2024-42439HistoryAug 14, 2024 - 4:42 p.m.
CVE-2024-42439 Zoom Workplace Desktop App for macOS and Zoom Meeting SDK for macOS - Untrusted Search Path
2024-08-1416:42:48
CWE-426
Zoom
www.cve.org
4
zoom
macos
untrusted search path
privilege escalation
CVSS3
6.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
EPSS
0
Percentile
9.5%
Untrusted search path in the installer for Zoom Workplace Desktop App for macOS and Zoom Meeting SDK for macOS before 6.1.0 may allow a privileged user to conduct an escalation of privilege via local access.
CNA Affected
[
{
"defaultStatus": "unaffected",
"platforms": [
"MacOS"
],
"product": "Zoom Workplace Desktop App for macOS and Zoom Meeting SDK for macOS",
"vendor": "Zoom Communications Inc.",
"versions": [
{
"status": "affected",
"version": "before version 6.1.0"
}
]
}
]Related
cve
cve
CVE-2024-42439
2024-08-14 17:15:17
vulnrichment
vulnrichment
nessus
nessus
Zoom Workplace Desktop App for macOS < 6.1.0 Buffer Overflow (ZSB-24033)
2024-08-30 00:00:00
nvd
nvd
CVE-2024-42439
2024-08-14 17:15:17
CVSS3
6.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
EPSS
0
Percentile
9.5%
Related for CVELIST:CVE-2024-42439