CVE-2024-27238CWE-367

Zoom Apps and SDKs - Race Condition

High · published July 15, 2024

CVSS v3.1
7.1
EPSS
0%
Percentile
1.4
In the wild
Unconfirmed
What it is

Race condition in the installer for some Zoom Apps and SDKs for Windows before version 6.0.0 may allow an authenticated user to conduct a privilege escalation via local access.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00114 · 1.4th percentile
Weakness
CWE-367 · Time-of-check Time-of-use (TOCTOU) Race Condition
Published
2024-07-15T17:20Z
EPSS history
Timeline
  • 15 JUL 17:20Z
    Zoom Apps and SDKs - Race Condition
    cvelistv5