Zoom Security Updates – 13 November 2024

The addressed vulnerabilities could allow the attacker to gain elevated privileges, perform denial of service attacks, or obtain sensitive information and gain access to the affected systems.

Sample of the addressed vulnerabilities:

1. Zoom Apps Privilege Escalation Vulnerability (CVE-2024-45421):

• CVSS: 8.5
• Attack Vector: Network
• Attack Complexity: High
• Privileges Required: Low
• User Interaction: None
• Consequences: Gain Privileges

2. Zoom Apps Obtain Information Vulnerability (CVE-2024-45419):

• CVSS: 8.1
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: None
• User Interaction: Required
• Consequences: Obtain Information

The affected products:

• Zoom Workplace App for macOS, IOS, Windows, Linux, and Andriod.
• Zoom Rooms Client.
• Zoom Rooms Controller.
• Zoom Video SDK.
• Zoom Meeting SDK.
• Zoom Workplace VDI.
• Zoom Rooms App.