Vulnerabilityhigh

Zoom addressed two high

Security Affairsby @securityaffairsNov 13, 2024 · 15:12 UTC (Nov 13, 2024)2 min read1 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2024-45421 CVE-2024-45419 CVE-2024-45422 CVE-2024-45420 CVE-2024-45418 CVE-2024-45417

Tags: cve-2024-45421 cve-2024-45419 cve-2024-45422 cve-2024-45420 cve-2024-45418 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2024-45421 +2 related CVEs CVE-2024-45418 CVE-2024-45417	Buffer overflow in some Zoom Apps may allow an authenticated user to conduct an escalation of privilege via network access	8.8 group max	<1%		Feb 25, 2025
CVE-2024-45422 +2 related CVEs CVE-2024-45419 CVE-2024-45420	Improper input validation in some Zoom Apps before version 6.2.0 may allow an unauthenticated user to conduct a denial of service via network access	7.5 group max	<1%		Nov 19, 2024

From the original article

2 min read at securityaffairs.com

Zoom addressed six flaws, including two high-severity issues that could allow remote attackers to escalate privileges or leak sensitive information. Zoom addressed six vulnerabilities in its video conferencing and communication platform.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.