CVE-2024-45418CWE-61

Zoom Apps for macOS - Symbolic Link Following

Medium · published February 25, 2025

CVSS v3.1
5.4
EPSS
0%
Percentile
40.2
In the wild
Unconfirmed
What it is

Symlink following in the installer for some Zoom apps for macOS before version 6.1.5 may allow an authenticated user to conduct an escalation of privilege via network access.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00476 · 40.2th percentile
Weakness
CWE-61 · UNIX Symbolic Link (Symlink) Following
Published
2025-02-25T19:52Z
EPSS history
Timeline
  • 25 FEB 19:52Z
    Zoom Apps for macOS - Symbolic Link Following
    cvelistv5