CVE-2024-24694: Zoom Desktop Client for Windows - Improper Privilege Management
Published Apr 9, 2024
·Updated
Improper privilege management in the installer for Zoom Desktop Client for Windows before version 5.17.10 may allow an authenticated user to conduct an escalation of privilege via local access.
Affected Software
2 affected components
Zoom Desktop Client for Windows<5.17.10
Zoom Zoom Windows<5.7.10
Event History
Apr 9, 2024
CVE Published
via MITRE·05:13 PM
Data Sourced
via MITRE·05:13 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-24694?
CVE-2024-24694 has a moderate severity rating due to the potential for privilege escalation.
2
How do I fix CVE-2024-24694?
To mitigate CVE-2024-24694, update the Zoom Desktop Client for Windows to version 5.17.10 or later.
3
Who is affected by CVE-2024-24694?
CVE-2024-24694 affects users of the Zoom Desktop Client for Windows versions prior to 5.17.10.
4
What type of vulnerability is CVE-2024-24694?
CVE-2024-24694 is an improper privilege management vulnerability.
5
Can CVE-2024-24694 be exploited remotely?
CVE-2024-24694 requires local access, meaning it cannot be exploited remotely.