5 results (0.006 seconds)

CVSS: 3.9EPSS: 0%CPEs: 1EXPL: 0

30 Jan 2025 — Symlink following in the installer for Zoom Workplace App for macOS before 6.2.10 may allow an authenticated user to conduct a denial of service via local access. • https://www.zoom.com/en/trust/security-bulletin/zsb-25005 • CWE-59: Improper Link Resolution Before File Access ('Link Following') •

CVSS: 6.7EPSS: 0%CPEs: 1EXPL: 0

14 Aug 2024 — Improper privilege management in the installer for Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS and Zoom Rooms Client for macOS before 6.1.5 may allow a privileged user to conduct an escalation of privilege via local access. • https://www.zoom.com/en/trust/security-bulletin/zsb-24034 • CWE-269: Improper Privilege Management •

CVSS: 6.7EPSS: 0%CPEs: 1EXPL: 0

14 Aug 2024 — Improper privilege management in the installer for Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS and Zoom Rooms Client for macOS before 6.1.5 may allow a privileged user to conduct an escalation of privilege via local access. • https://www.zoom.com/en/trust/security-bulletin/zsb-24034 • CWE-269: Improper Privilege Management •

CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0

14 Aug 2024 — Untrusted search path in the installer for Zoom Workplace Desktop App for macOS and Zoom Meeting SDK for macOS before 6.1.0 may allow a privileged user to conduct an escalation of privilege via local access. • https://www.zoom.com/en/trust/security-bulletin/zsb-24032 • CWE-426: Untrusted Search Path •

CVSS: 6.6EPSS: 0%CPEs: 1EXPL: 0

15 Jul 2024 — Uncontrolled search path element in the installer for Zoom Workplace Desktop App for macOS before version 6.0.10 may allow an authenticated user to conduct a denial of service via local access. El elemento de ruta de búsqueda no controlado en el instalador de la aplicación de escritorio Zoom Workplace para macOS anterior a la versión 6.0.10 puede permitir que un usuario autenticado realice una denegación de servicio a través del acceso local. • https://www.zoom.com/en/trust/security-bulletin/zsb-24027 • CWE-427: Uncontrolled Search Path Element •