CVEvulnerability

CVE-2024-45418

8.8 HIGH Published 2025-02-25 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-02-25
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.4 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-59, CWE-61

Description

Symlink following in the installer for some Zoom apps for macOS before version 6.1.5 may allow an authenticated user to conduct an escalation of privilege via network access.

Affected configurations

• zoom meeting software development kit (< 6.1.5) • zoom rooms (< 6.1.5) • zoom video software development kit (< 6.1.5) • zoom workplace desktop (< 6.1.5)

Related

Weakness · CWE (2)

  • CWE-59 Improper Link Resolution Before File Access weakness
  • CWE-61 UNIX Symbolic Link (Symlink) Following weakness

References