Rapid7

vulnerability

Zoom Zoom: CVE-2021-34419: HTML injection in Zoom Linux client

Severity
5
CVSS
(AV:N/AC:L/Au:N/C:N/I:P/A:N)
Published
Nov 9, 2021
Added
Feb 19, 2024
Modified
Mar 25, 2026

Description

In the Zoom Client for Meetings for Ubuntu Linux before version 5.1.0, there is an HTML injection flaw when sending a remote control request to a user in the process of in-meeting screen sharing. This could allow meeting participants to be targeted for social engineering attacks.Zoom addressed this issue in the 5.1.0 Zoom Client for Meetings for Ubuntu Linux release. Users can help keep themselves secure by applying current updates or downloading the latest Zoom software with all current security updates fromhttps://zoom.us/download.

Solution

zoom-zoom-upgrade-latest
Title
Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.