Zoom Workplace Desktop App For Windows < 6.0.0 Race Condition (ZSB-24021)

The version of Zoom Workplace Desktop App for Windows installed on the remote host is prior to 6.0.0. It is, therefore, affected by a race condition vulnerability that allow a local authenticated attacker to conduct a privilege escalation via local access. Note that Nessus has not tested for this...

Zoom Workplace Desktop App For Windows < 6.0.0 Improper Input Validation (ZSB-24019)

The version of Zoom Workplace Desktop App for Windows installed on the remote host is prior to 6.0.0. It is, therefore, affected by a improper input validation vulnerability that allow a local authenticated attacker to conduct a privilege escalation via local access. Note that Nessus has not test...

Zoom Workplace Desktop App For Windows < 6.0.0 Path Traversal (ZSB-24023)

The version of Zoom Workplace Desktop App for Windows installed on the remote host is prior to 6.0.0. It is, therefore, affected by a path traversal vulnerability that allow a local authenticated attacker to conduct information disclosure via network access. Note that Nessus has not tested for th...

Zoom Workplace Desktop App For Windows < 6.0.10 Privilage Escalation (ZSB-24026)

The version of Zoom Workplace Desktop App for Windows installed on the remote host is prior to 6.0.10. It is, therefore, affected by a privilage escalation vulnerability that may allow a local authenticated attacker to cause a privilege escalation. Note that Nessus has not tested for this issue b...

CVE-2024-39820

CVE-2024-39820 affects Zoom Workplace Desktop App for macOS prior to version 6.0.10. The issue is an uncontrolled search path element in the installer, enabling an authenticated local attacker to cause a denial of service via local access. A fixed version is 6.0.10 or later; remediation is to upg...

CVE-2024-39820 Zoom Workplace Desktop App for macOS - Uncontrolled Search Path Element

Uncontrolled search path element in the installer for Zoom Workplace Desktop App for macOS before version 6.0.10 may allow an authenticated user to conduct a denial of service via local access...

PT-2024-5133 · Zoom · Zoom Workplace Desktop App

Name of the Vulnerable Software and Affected Versions: Zoom Workplace Desktop App for macOS versions prior to 6.0.10 Description: The issue is related to an uncontrolled search path element in the installer, which may allow an authenticated user to conduct a denial of service via local access. Th...

GHSA-XGQM-WP7W-MGG2 Mattermost Desktop App allows for bypassing TCC restrictions on macOS

Mattermost Desktop App versions =5.7.0 fail to disable certain Electron debug flags which allows for bypassing TCC restrictions on macOS...

Mattermost Desktop App Remote Code Execution

Mattermost Desktop App versions =5.7.0 fail to correctly prompt for permission when opening external URLs which allows a remote attacker to force a victim over the Internet to run arbitrary programs on the victim's system via custom URI schemes...

GHSA-HVXG-77MG-VRVP Mattermost Desktop App Remote Code Execution

Mattermost Desktop App versions =5.7.0 fail to correctly prompt for permission when opening external URLs which allows a remote attacker to force a victim over the Internet to run arbitrary programs on the victim's system via custom URI schemes...

Mattermost Desktop App allows for bypassing TCC restrictions on macOS

Mattermost Desktop App versions =5.7.0 fail to disable certain Electron debug flags which allows for bypassing TCC restrictions on macOS...

CVE-2024-37182

Mattermost Desktop App versions =5.7.0 fail to correctly prompt for permission when opening external URLs which allows a remote attacker to force a victim over the Internet to run arbitrary programs on the victim's system via custom URI schemes...

CVE-2024-36287

Mattermost Desktop App versions =5.7.0 fail to disable certain Electron debug flags which allows for bypassing TCC restrictions on macOS...

UBUNTU-CVE-2024-36287

Mattermost Desktop App versions =5.7.0 fail to disable certain Electron debug flags which allows for bypassing TCC restrictions on macOS...

CVE-2024-37182 Lack of permissions prompting when opening external URLs

Mattermost Desktop App versions =5.7.0 fail to correctly prompt for permission when opening external URLs which allows a remote attacker to force a victim over the Internet to run arbitrary programs on the victim's system via custom URI schemes...

CVE-2024-37182 Lack of permissions prompting when opening external URLs

Mattermost Desktop App versions =5.7.0 fail to correctly prompt for permission when opening external URLs which allows a remote attacker to force a victim over the Internet to run arbitrary programs on the victim's system via custom URI schemes...

CVE-2024-36287 Bypass of TCC restrictions on macOS

Mattermost Desktop App versions =5.7.0 fail to disable certain Electron debug flags which allows for bypassing TCC restrictions on macOS...

CVE-2024-36287 Bypass of TCC restrictions on macOS

Mattermost Desktop App versions =5.7.0 fail to disable certain Electron debug flags which allows for bypassing TCC restrictions on macOS...

CVE-2024-36287 Bypass of TCC restrictions on macOS

Mattermost Desktop App versions =5.7.0 fail to disable certain Electron debug flags which allows for bypassing TCC restrictions on macOS...

CVE-2024-36287

Mattermost Desktop App versions ≤ 5.7.0 fail to disable certain Electron debug flags, enabling bypass of macOS TCC restrictions. Root cause: improper handling of Electron flags in the app. Overviews from multiple sources corroborate the issue (CVE-2024-36287). The documents do not provide specifi...