CVEvulnerability

CVE-2021-34411

7.8 HIGH Published 2021-09-27 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-09-27
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-269

Description

During the installation process forZoom Rooms for Conference Room for Windows before version 5.3.0 it is possible to launch Internet Explorer with elevated privileges. If the installer was launched with elevated privileges such as by SCCM this can result in a local privilege escalation.

Affected configurations

• zoom rooms (< 5.3.0)

Related

Weakness · CWE (1)

  • CWE-269 Improper Privilege Management weakness

References