Rapid7’s 2026 Global Cybersecurity Summit is now available on-demand.Watch sessions.
Rapid7

vulnerability

Zoom Zoom: CVE-2021-34424: Process memory exposure in Zoom Client and other products

Severity
5
CVSS
(AV:N/AC:L/Au:N/C:P/I:N/A:N)
Published
Nov 24, 2021
Added
Jan 8, 2025
Modified
Mar 25, 2026

Description

A vulnerability was discovered in the products listed in the "Affected Products" section of this bulletin which potentially allowed for the exposure of the state of process memory. This issue could be used to potentially gain insight into arbitrary areas of the product’s memory.Zoom has addressed this issue in the latest releases of the products listed in the section below. Users can help keep themselves secure by applying current updates or downloading the latest Zoom software with all current security updates.

Solution

zoom-zoom-upgrade-latest
Title
Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.