CVE-2024-24697
HIGHDescription
Untrusted search path in some Zoom 32 bit Windows clients may allow an authenticated user to conduct an escalation of privilege via local access.
Is your site exposed to CVE-2024-24697?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| zoom | meeting_software_development_kit |
| zoom | rooms |
| zoom | vdi_windows_meeting_clients |
| zoom | vdi_windows_meeting_clients |
| zoom | vdi_windows_meeting_clients |
| zoom | zoom |
References
Frequently Asked Questions
What is CVE-2024-24697? +
How severe is CVE-2024-24697? +
What products are affected by CVE-2024-24697? +
How do I check if I'm vulnerable to CVE-2024-24697? +
Related Vulnerabilities
In Google fuse-archive versions prior to 1.24, an attacker who can prepend a directory to PATH or write a malicious …
Untrusted Search Path vulnerability in OpenText™ Application Lifecycle Management (ALM),Quality Center allows Code Inclusion. The vulnerability allows a user to …
In Seagate Toolkit on Windows a vulnerability exists in the Toolkit Installer prior to versions 2.35.0.6 where it attempts to …
OpenVPN version 2.5.0 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows local authenticated users to perform a binary planting …
An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect™ App on enables a locally authenticated non administrative user …
Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allows a local user to escalate their privileges …