CVE-2024-45418
MEDIUMDescription
Symlink following in the installer for some Zoom apps for macOS before version 6.1.5 may allow an authenticated user to conduct an escalation of privilege via network access.
Is your site exposed to CVE-2024-45418?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| zoom | meeting_software_development_kit |
| zoom | rooms |
| zoom | video_software_development_kit |
| zoom | workplace_desktop |
References
Advisories & Patches
Frequently Asked Questions
What is CVE-2024-45418? +
How severe is CVE-2024-45418? +
What products are affected by CVE-2024-45418? +
How do I check if I'm vulnerable to CVE-2024-45418? +
Related Vulnerabilities
Airlink's Daemon interfaces with Docker and the Panel to provide secure access for controlling instances via the Panel. In version …
Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Insecure handling of …
A UNIX Symbolic Link (Symlink) Following vulnerability in logrotate config in the exim package allowed privilege escalation from mail user/group …
astral-tokio-tar is a tar archive reading/writing library for async Rust. In versions 0.5.3 and earlier of astral-tokio-tar, tar archives may …
A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of openSUSE Tumbleweed traefik2 allows the traefik user to escalate …
tar-fs provides filesystem bindings for tar-stream. Versions prior to 3.1.1, 2.1.3, and 1.16.5 are vulnerable to symlink validation bypass if …