CVE-2020-11470

Zoom Client for Meetings through 4.6.8 on macOS has the disable-library-validation entitlement, which allows a local process (with the user's privileges) to…

Low · published April 1, 2020

CVSS v3.0
2.3
EPSS
0%
Percentile
22.2
In the wild
Unconfirmed
What it is

Zoom Client for Meetings through 4.6.8 on macOS has the disable-library-validation entitlement, which allows a local process (with the user's privileges) to obtain unprompted microphone and camera access by loading a crafted library and thereby inheriting Zoom Client's microphone and camera access.

The record
Technical detail
CVSS v3.0
2.3 · LOW
Vector
CVSS:3.0/AC:H/AV:L/A:N/C:L/I:N/PR:H/S:C/UI:R
CVSS v4.0
Not supplied
EPSS
0.00306 · 22.2th percentile
Published
2020-04-01T22:00Z
EPSS history
Timeline
  • 01 APR 22:00Z
    Zoom Client for Meetings through 4.6.8 on macOS has the disable-library-validation entitlement, which allows a local process (with the user's privileges) to…
    cvelistv5