CVE Daily

CVE-2024-27238

Race condition in the installer for some Zoom Apps and SDKs for Windows before v...

High CVSS 7.1

Overview

Race condition in the installer for some Zoom Apps and SDKs for Windows before version 6.0.0 may allow an authenticated user to conduct a privilege escalation via local access.

CWE: CWE-367 Published: 2024-07-15T18:15:03.633
Risk analysis

This vulnerability is rated 🟠 HIGH.

  • CVSS: 7.1 (HIGH)
  • Detected tags: priv_esc, race (tag impact: HIGH)

Recommended actions:

  • Fix privilege escalation urgently.
  • Enforce least-privilege and strengthen EDR detection.

Recommended tools

Tags