CVE-2024-45417mediumCWE-708

CVE-2024-45417: medium-severity vulnerability in Zoom Apps for macOS

Zoom Apps for macOS - Uncontrolled Resource Consumption

Published · Updated

Follow this CVE+ Monitor Zoom Apps

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6epss 0.2%
In short

The Zoom apps installer for macOS doesn't properly limit how much system resources it uses, allowing someone with admin access on the computer to potentially read sensitive information stored locally.

Technical detail

Uncontrolled resource consumption vulnerability in Zoom macOS installer versions prior to 6.1.5 enables information disclosure through local access by a privileged user. The vulnerability stems from insufficient resource management controls during installation, potentially allowing enumeration or extraction of sensitive data accessible to administrative accounts.

Summary generated and translated by AI from the official description.
Uncontrolled resource consumption in the installer for some Zoom apps for macOS before version 6.1.5 may allow a privileged user to conduct a disclosure of information via local access.
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
Affected products
Zoom Communications, Inc · Zoom Apps for macOS
Related CVEs — Zoom Apps for macOS

In the same product, most dangerous first.

CVE-2024-45418MEDIUMZoom Apps for macOS - Symbolic Link FollowingEPSS 0.5%