KLA11797 Security vulnerability in Zoom

Security vulnerability was found in Zoom. Malicious users can exploit this vulnerability to obtain sensitive information, bypass security restrictions, spoof user interface.

Original advisories

Zoom Security CVE-2018-15715

CVE-2018-15715

Exploitation

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Related products

Zoom-MSI

CVE list

CVE-2018-15715 critical

Solution

Update to the latest version

Download Zoom

Impacts

• OSI

Obtain sensitive information. Exploitation of vulnerabilities with this impact can lead to capturing by abuser information, critical for user or system.

• SB

Security bypass. Exploitation of vulnerabilities with this impact can lead to performing actions restricted by current security settings.

• SUI

Spoof user interface. Exploitation of vulnerabilities with this impact can lead to changes in user interface to beguile user into inaccurate behavior.

Affected Products

• Zoom earlier thanWindows: 4.1.34460.1105Mac: 4.1.34475.1105Linux: 2.5.146186.1130IOS: 4.1.18 (4460.1105)Android: 4.1.34489.1105Chrome: 3.3.1635.1130