Skip to content
OpenAdvisories
Medium · 6.5 CVE-2024-42439 EUVD-2024-39624GHSA-9jpm-269x-j69q

Zoom Workplace Desktop App for macOS and Zoom Meeting SDK for macOS - Untrusted Search Path

Published Aug 14, 2024 · Updated Aug 16, 2024 · Assigned by Zoom

Vendor: Zoom Communications Product: Zoom Workplace Desktop App for macOS and Zoom Meeting SDK for macOS Platform: macOS

Description

Untrusted search path in the installer for Zoom Workplace Desktop App for macOS and Zoom Meeting SDK for macOS before 6.1.0 may allow a privileged user to conduct an escalation of privilege via local access.

Affected products

VendorProductAffectedFixed
Zoom Communications Zoom Workplace Desktop App for macOS and Zoom Meeting SDK for macOS before version 6.1.0 —

References