We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2024-27244

Zoom Workplace VDI App for Windows - Insufficient Verification of Data Authenticity



Description

Insufficient verification of data authenticity in the installer for Zoom Workplace VDI App for Windows may allow an authenticated user to conduct an escalation of privilege via local access.

Reserved 2024-02-21 | Published 2024-05-15 | Updated 2024-09-20 | Assigner Zoom


MEDIUM: 6.7CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Problem types

CWE-347 Improper Verification of Cryptographic Signature

Product status

Default status
unaffected

< 5.17.10
affected

References

www.zoom.com/en/trust/security-bulletin/zsb-24015/

cve.org (CVE-2024-27244)

nvd.nist.gov (CVE-2024-27244)

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2024-27244

Support options

Helpdesk Chat, Email, Knowledgebase