Medium · 6.7 CVE-2024-27244 EUVD-2024-24483GHSA-53jq-549v-3fjg

Zoom Workplace VDI App for Windows - Insufficient Verification of Data Authenticity

Published May 15, 2024 · Updated Sep 20, 2024 · Assigned by Zoom

Vendor: Zoom Video Communications Product: Zoom Workplace VDI App for Windows Platform: Windows

Description

Insufficient verification of data authenticity in the installer for Zoom Workplace VDI App for Windows may allow an authenticated user to conduct an escalation of privilege via local access.

Affected products

Vendor	Product	Affected	Fixed
Zoom Video Communications	Zoom Workplace VDI App for Windows	< 5.17.10	—

References

https://www.zoom.com/en/trust/security-bulletin/zsb-24015/