KLA12444 OSI vulnerability in Zoom

Information disclosure vulnerability was found in Zoom. Malicious users can exploit this vulnerability to obtain sensitive information.

Original advisories

Zoom Security Bulletin

Related products

Zoom-MSI

CVE list

CVE-2021-34408 critical

Solution

Update to the latest version

Download Zoom

Impacts

• OSI

Obtain sensitive information. Exploitation of vulnerabilities with this impact can lead to capturing by abuser information, critical for user or system.

• PE

Privilege escalation. Exploitation of vulnerabilities with this impact can lead to performing by abuser actions, which are normally disallowed for current role.

Affected Products

• Zoom for Windows earlier than 5.3.2