Vulnerability Description
Improper input validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Zoom | Meeting Software Development Kit | < 5.16.5 |
| Zoom | Rooms | < 5.17.0 |
| Zoom | Vdi Windows Meeting Clients | < 5.14.14 |
| Zoom | Zoom | < 5.16.5 |
Related Weaknesses (CWE)
References
- https://www.zoom.com/en/trust/security-bulletin/ZSB-24008/Vendor Advisory
- https://www.zoom.com/en/trust/security-bulletin/ZSB-24008/Vendor Advisory
FAQ
What is CVE-2024-24691?
CVE-2024-24691 is a vulnerability with a CVSS score of 9.6 (CRITICAL). Improper input validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an unauthenticated user to conduct an escalation of privilege via ...
How severe is CVE-2024-24691?
CVE-2024-24691 has been rated CRITICAL with a CVSS base score of 9.6/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2024-24691?
Check the references section above for vendor advisories and patch information. Affected products include: Zoom Meeting Software Development Kit, Zoom Rooms, Zoom Vdi Windows Meeting Clients, Zoom Zoom.