vulnerability
Zoom Zoom: CVE-2024-24694: Zoom Desktop Client for Windows - Improper Privilege Management
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 4 | (AV:L/AC:M/Au:S/C:N/I:C/A:N) | Apr 9, 2024 | Jan 8, 2025 | Mar 25, 2026 |
Severity
4
CVSS
(AV:L/AC:M/Au:S/C:N/I:C/A:N)
Published
Apr 9, 2024
Added
Jan 8, 2025
Modified
Mar 25, 2026
Description
Improper privilege management in the installer for Zoom Desktop Client for Windows before version 5.17.10 may allow an authenticated user to conduct an escalation of privilege via local access.
Solution
zoom-zoom-upgrade-latest
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.