CVE-2024-42441CWE-266

Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS, Zoom Rooms Client for macOS - Incorrect Privilege Assignment

Medium · published August 14, 2024

CVSS v3.1
6.2
EPSS
0%
Percentile
14.0
In the wild
Unconfirmed
What it is

Incorrect privilege assignment in the installer for Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS and Zoom Rooms Client for macOS before 6.1.5 may allow a privileged user to conduct an escalation of privilege via local access.

The record
Technical detail
CVSS v3.1
6.2 · MEDIUM
Vector
CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00238 · 14.0th percentile
Weakness
CWE-266 · Incorrect Privilege Assignment
Published
2024-08-14T16:46Z
EPSS history
Timeline
  • 14 AUG 16:46Z
    Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS, Zoom Rooms Client for macOS - Incorrect Privilege Assignment
    cvelistv5