CVE-2024-24699

Published: Feb 14, 2024Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

Business logic error in some Zoom clients may allow an authenticated user to conduct information disclosure via network access.

Products: Zoom: Meeting Sdk, Rooms, Vdi Windows Meeting Clients, Zoom

4 products

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Zoom Meeting Sdk	version < 5.16.5
Zoom Rooms	version < 5.17.0
Zoom Vdi Windows Meeting Clients	version < 5.15.15
Zoom Vdi Windows Meeting Clients	5.15.15 < version < 5.16.10
Zoom Vdi Windows Meeting Clients	5.16.10 < version < 5.17.5
Zoom Zoom	version < 5.16.5
Zoom Zoom	version < 5.16.5
Zoom Zoom	version < 5.16.5
Zoom Zoom	version < 5.16.5
Zoom Zoom	version < 5.16.5

Source: security@zoom.us

Vendor Advisory

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

No history available yet.