← Back

CVE-2024-24697

nvd nist
Published: Feb 14, 2024Modified: Jun 17, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

Untrusted search path in some Zoom 32 bit Windows clients may allow an authenticated user to conduct an escalation of privilege via local access.

Affected (6)

Zoom
4 products
Meeting Software Development Kit
Rooms
Vdi Windows Meeting Clients
Zoom
Configuration A
6 vulnerable
Vulnerable SoftwareAffected Versions
Meeting Software Development Kit
Before 5.17.0
Rooms
Before 5.17.0
Zoom
Vdi Windows Meeting Clients
Before 5.15.5
Vdi Windows Meeting Clients
After 5.15.5 to 5.16.2
Vdi Windows Meeting Clients
After 5.16.2 to 5.17.5
Zoom
Before 5.17.0

Related CWEs

CWE-426
Untrusted Search Path
The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control.

References (2)

Source: security@zoom.us
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.