Use after free in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access.
oryginał ENCVSS Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:HZoom Meeting Software Development Kit
APPZoom< 6.3.0Zoom Rooms
APPZoom< 6.3.0Zoom Rooms Controller
APPZoom< 6.3.0Zoom Workplace
APPZoom< 6.3.0Zoom Workplace Desktop
APPZoom< 6.3.0Zoom Workplace Virtual Desktop Infrastructure
APPZoom< 6.1.166.1.17 – 6.2.12 (bez)
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
Memory
CWE
Powiązane podatności
CVE-2026-30903CRITICAL9.6PL ✓ten sam produkt
Zoom Workplace dla Windows — privilege escalation przez kontrolę ścieżki pliku w funkcji Mail
CVE-2025-49457CRITICAL9.6PL ✓ten sam produkt
Untrusted search path w klientach Zoom dla Windows — privilege escalation przez sieć
CVE-2024-24691CRITICAL9.6PL ✓ten sam produkt
Privilege escalation w Zoom Desktop Client, VDI Client i Meeting SDK dla Windows
CVE-2026-53407HIGH8.1ten sam produkt
Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and...
CVE-2026-53408HIGH8.1ten sam produkt
Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and...