CVE-2018-15715CWE-290

Zoom clients on Windows (before version 4.1.34814.1119), Mac OS (before version 4.1.34801.1116), and Linux (2.4.129780.0915 and below) are vulnerable to…

published November 30, 2018

CVSS
—
EPSS
3%
Percentile
89.1
In the wild
Unconfirmed
What it is

🚨 A sneaky attacker can manipulate Zoom meetings simply by spoofing UDP messages. 🦸 Think of it like a mischievous guest at a dinner party who can impersonate the host, removing other guests from the table or changing the conversation completely. That's how this vulnerability lets an attacker mess with your Zoom calls! An unauthorized attacker could remove attendees from your meetings, send fake messages, or even take control of shared screens, leading to confusion and potential data leaks. Imagine a hacker playing puppet master in your virtual meetings—yikes!

Put simply

Think of it like a mischievous guest at a dinner party who can impersonate the host, removing other guests from the table or changing the conversation completely. That's how this vulnerability lets an attacker mess with your Zoom calls! This vulnerability allows remote unauthenticated attackers to send spoofed UDP messages to Zoom clients, invoking unwanted functionality like kicking users out or hijacking screens during a call.

What to do

An unauthorized attacker could remove attendees from your meetings, send fake messages, or even take control of shared screens, leading to confusion and potential data leaks. Imagine a hacker playing puppet master in your virtual meetings—yikes! To protect yourself, ensure you update your Zoom clients to at least Windows version 4.1.34814.1119, Mac OS version 4.1.34801.1116, or Linux version 2.4.129780.0916 or higher. Regularly check for updates to keep your system secure! You've got this! Stay updated and you'll keep those sneaky hackers at bay! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03487 · 89.1th percentile
Weakness
CWE-290 · Authentication Bypass by Spoofing
Published
2018-11-30T20:00Z
EPSS history
Timeline
  • 30 NOV 20:00Z
    Zoom clients on Windows (before version 4.1.34814.1119), Mac OS (before version 4.1.34801.1116), and Linux (2.4.129780.0915 and below) are vulnerable to…
    cvelistv5