CVE-2024-24694CWE-347

Zoom Desktop Client for Windows - Improper Privilege Management

Medium · published April 9, 2024

CVSS v3.1
5.9
EPSS
0%
Percentile
4.2
In the wild
Unconfirmed
What it is

Improper privilege management in the installer for Zoom Desktop Client for Windows before version 5.17.10 may allow an authenticated user to conduct an escalation of privilege via local access.

The record
Technical detail
CVSS v3.1
5.9 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00154 · 4.2th percentile
Weakness
CWE-347 · Improper Verification of Cryptographic Signature
Published
2024-04-09T17:13Z
EPSS history
Timeline
  • 09 APR 17:13Z
    Zoom Desktop Client for Windows - Improper Privilege Management
    cvelistv5