Zoom Video Communications Zoom Client und Rooms: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 8

• High 7.1
  CVE-2024-27238

  Zoom Apps and SDKs - Race Condition

  Race condition in the installer for some Zoom Apps and SDKs for Windows before version 6.0.0 may allow an authenticated user to conduct a privilege escalation via local access.

  Zoom Communications Zoom Apps and SDKs
  Jul 15, 2024
• High 7.1
  CVE-2024-27240

  Zoom Apps for Windows - Improper Input Validation

  Improper input validation in the installer for some Zoom Apps for Windows may allow an authenticated user to conduct a privilege escalation via local access.

  Zoom Communications Zoom Apps for Windows Windows
  Jul 15, 2024
• Medium 6.8
  CVE-2024-39826

  Zoom Workplace Apps and SDKs - Path traversal

  Race condition in Team Chat for some Zoom Workplace Apps and SDKs for Windows may allow an authenticated user to conduct information disclosure via network access.

  Zoom Communications Zoom Workplace Apps and SDKs
  Jul 15, 2024
• Medium 6.7
  CVE-2024-39819

  Zoom Workplace Apps and SDK for Windows - Improper Privilege Management

  Integrity check in the installer for some Zoom Workplace Apps and SDKs for Windows may allow an authenticated user to conduct a privilege escalation via local access.

  Zoom Communications Zoom Workplace Apps and SDK for Windows Windows
  Jul 15, 2024
• Medium 6.6
  CVE-2024-39820

  Zoom Workplace Desktop App for macOS - Uncontrolled Search Path Element

  Uncontrolled search path element in the installer for Zoom Workplace Desktop App for macOS before version 6.0.10 may allow an authenticated user to conduct a denial of service via local access.

  Zoom Communications Zoom Workplace Desktop App for macOS macOS
  Jul 15, 2024
• Medium 6.6
  CVE-2024-39821

  Zoom Workplace App for Windows and Zoom Rooms App for Windows - Race Condition

  Race condition in the installer for Zoom Workplace App for Windows and Zoom Rooms App for Windows may allow an authenticated user to conduct a denial of service via local access.

  Zoom Communications Zoom Workplace App for Windows and Zoom Rooms App for Windows Windows
  Jul 15, 2024
• Medium 5.5
  CVE-2024-39827

  Zoom Workplace Desktop App for Windows - Improper Input Validation

  Improper input validation in the installer for Zoom Workplace Desktop App for Windows before version 6.0.10 may allow an authenticated user to conduct a denial of service via local access.

  Zoom Communications Zoom Workplace Desktop App for Windows Windows
  Jul 15, 2024
• Medium 5.3
  CVE-2024-27241

  Zoom Apps and SDKs - Improper Input Validation

  Improper input validation in some Zoom Apps and SDKs may allow an authenticated user to conduct a denial of service via network access.

  Zoom Communications Zoom Apps and SDKs
  Jul 15, 2024

Revision history

1. 2024-07-09 #1

   Initiale Fassung

References

• Zoom Security Bulletin ZSB-24019 vom 2024-07-09
  https://www.zoom.com/en/trust/security-bulletin/ZSB-24019/
• Zoom Security Bulletin ZSB-24020 vom 2024-07-09
  https://www.zoom.com/en/trust/security-bulletin/ZSB-24020/
• Zoom Security Bulletin ZSB-24021 vom 2024-07-09
  https://www.zoom.com/en/trust/security-bulletin/ZSB-24021/
• Zoom Security Bulletin ZSB-24023 vom 2024-07-09
  https://www.zoom.com/en/trust/security-bulletin/ZSB-24023/
• Zoom Security Bulletin ZSB-24024 vom 2024-07-09
  https://www.zoom.com/en/trust/security-bulletin/ZSB-24024/
• Zoom Security Bulletin ZSB-24026 vom 2024-07-09
  https://www.zoom.com/en/trust/security-bulletin/ZSB-24026/
• Zoom Security Bulletin ZSB-24027 vom 2024-07-09
  https://www.zoom.com/en/trust/security-bulletin/ZSB-24027/
• Zoom Security Bulletin ZSB-24028 vom 2024-07-09
  https://www.zoom.com/en/trust/security-bulletin/ZSB-24028/