CVE-2024-27244CWE-347

Zoom Workplace VDI App for Windows - Insufficient Verification of Data Authenticity

Medium · published May 15, 2024

CVSS v3.1
6.7
EPSS
0%
Percentile
0.8
In the wild
Unconfirmed
What it is

Insufficient verification of data authenticity in the installer for Zoom Workplace VDI App for Windows may allow an authenticated user to conduct an escalation of privilege via local access.

The record
Technical detail
CVSS v3.1
6.7 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00100 · 0.8th percentile
Weakness
CWE-347 · Improper Verification of Cryptographic Signature
Published
2024-05-15T20:46Z
EPSS history
Timeline
  • 15 MAY 20:46Z
    Zoom Workplace VDI App for Windows - Insufficient Verification of Data Authenticity
    cvelistv5