CVE-2024-42440: Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS, Zoom Rooms Client for macOS - Improper Privilege Management
Improper privilege management in the installer for Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS and Zoom Rooms Client for macOS before 6.1.5 may allow a privileged user to conduct an escalation of privilege via local access.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-42440?
CVE-2024-42440 is considered a critical vulnerability due to the potential for privilege escalation.
How do I fix CVE-2024-42440?
To fix CVE-2024-42440, upgrade to Zoom Workplace Desktop App, Zoom Meeting SDK, or Zoom Rooms Client for macOS version 6.1.5 or later.
Who is affected by CVE-2024-42440?
CVE-2024-42440 affects users of the Zoom Workplace Desktop App, Zoom Meeting SDK, and Zoom Rooms Client versions prior to 6.1.5 on macOS.
What type of vulnerability is CVE-2024-42440?
CVE-2024-42440 is classified as an improper privilege management vulnerability.
Can a non-privileged user exploit CVE-2024-42440?
CVE-2024-42440 requires a privileged user to exploit the vulnerability for local access escalation.