CVE-2024-27247: Zoom Desktop Client for macOS - Improper Privilege Management
Published Apr 9, 2024
·Updated
Improper privilege management in the installer for Zoom Desktop Client for macOS before version 5.17.10 may allow a privileged user to conduct an escalation of privilege via local access.
Affected Software
2 affected components
Zoom Desktop Client<5.17.10
Zoom Zoom Macos<5.17.10
Event History
Apr 9, 2024
CVE Published
via MITRE·05:15 PM
Data Sourced
via MITRE·05:15 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-27247?
CVE-2024-27247 is classified as a critical vulnerability due to its potential for privilege escalation.
2
How do I fix CVE-2024-27247?
To remediate CVE-2024-27247, upgrade the Zoom Desktop Client for macOS to version 5.17.10 or later.
3
Who is affected by CVE-2024-27247?
CVE-2024-27247 affects users of the Zoom Desktop Client for macOS versions prior to 5.17.10.
4
What type of vulnerability is CVE-2024-27247?
CVE-2024-27247 is an improper privilege management vulnerability that can lead to privilege escalation.
5
Can CVE-2024-27247 be exploited remotely?
CVE-2024-27247 requires local access for exploitation, making it less likely to be remotely exploited.