CVE Vulnerabilities

CVE-2024-42441

Incorrect Privilege Assignment

Published: Aug 14, 2024 | Modified: Oct 02, 2025
CVSS 3.x
6.7
MEDIUM
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

Incorrect privilege assignment in the installer for Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS and Zoom Rooms Client for macOS before 6.1.5 may allow a privileged user to conduct an escalation of privilege via local access.

Weakness

A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.

Affected Software

NameVendorStart VersionEnd Version
Meeting_software_development_kitZoom*6.1.5 (excluding)
RoomsZoom*6.1.5 (excluding)
Workplace_desktopZoom*6.1.5 (excluding)

Potential Mitigations

References