CVE-2024-24695

Published: Feb 14, 2024Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

Improper input validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an authenticated user to conduct a disclosure of information via network access.

Affected (5)

Products: Zoom: Meeting Software Development Kit, Vdi Windows Meeting Clients, Zoom

Zoom

3 products

Meeting Software Development Kit

Vdi Windows Meeting Clients

Zoom

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Zoom Meeting Software Development Kit	Before 5.16.5
Zoom Vdi Windows Meeting Clients	Before 5.15.15
Zoom Vdi Windows Meeting Clients	After 5.15.15 to 5.16.12
Zoom Vdi Windows Meeting Clients	After 5.16.12 to 5.17.5
Zoom Zoom	Before 5.16.5

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

https://www.zoom.com/en/trust/security-bulletin/ZSB-24002/

Source: security@zoom.us

Vendor Advisory

https://www.zoom.com/en/trust/security-bulletin/ZSB-24002/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.