CVE-2024-42439: Zoom Workplace Desktop App for macOS and Zoom Meeting SDK for macOS - Untrusted Search Path
Published Aug 14, 2024
·Updated
Untrusted search path in the installer for Zoom Workplace Desktop App for macOS and Zoom Meeting SDK for macOS before 6.1.0 may allow a privileged user to conduct an escalation of privilege via local access.
Affected Software
2 affected components
Zoom Meeting Software Development Kit Macos<6.1.0
Zoom Workplace Desktop Macos<6.1.0
Event History
Aug 14, 2024
CVE Published
via MITRE·04:42 PM
Data Sourced
via MITRE·04:42 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-42439?
CVE-2024-42439 has been rated as a medium severity vulnerability due to its potential for privilege escalation.
2
How do I fix CVE-2024-42439?
To fix CVE-2024-42439, update the Zoom Workplace Desktop App and Zoom Meeting SDK for macOS to version 6.1.0 or later.
3
What software is affected by CVE-2024-42439?
CVE-2024-42439 affects the Zoom Workplace Desktop App and Zoom Meeting SDK for macOS versions prior to 6.1.0.
4
Can CVE-2024-42439 be exploited remotely?
CVE-2024-42439 cannot be exploited remotely as it requires local access by a privileged user.
5
What type of vulnerability is CVE-2024-42439?
CVE-2024-42439 is classified as an untrusted search path vulnerability which can lead to privilege escalation.