CVE-2024-45421

—

CVSS 3.1

8.8 high

EPSS

<1%p46

Published

Feb 25, 2025 (Feb 25, 2025)

Modified

Jun 17, 2026

Description

Buffer overflow in some Zoom Apps may allow an authenticated user to conduct an escalation of privilege via network access.

Vendors: zoom
Products: meeting software development kit, rooms, rooms controller, video software development kit, workplace, workplace desktop, workplace virtual desktop infrastructure
Weakness: CWE-122, CWE-119
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news2 stories

Zoom patches critical Windows flaw allowing privilege escalation

Security AffairsAug 14, 08:22 UTC · Aug 14, 2025Vulnerability CVE-2025-49457 CVE-2024-45421 CVE-2024-45419

60

Zoom addressed two high

Security AffairsNov 13, 15:12 UTC · Nov 13, 2024Vulnerability CVE-2024-45421 CVE-2024-45419 CVE-2024-45422+3 CVEs

47