Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.0
CVE-2024-39820: Uncontrolled search path element in the installer for Zoom Workplace Desktop App for macOS before version 6.0.10 may allow an authenticated user to conduct a denial of service via local access.
CVE-2024-39820 · published 2 years ago
Summary
Uncontrolled search path element in the installer for Zoom Workplace Desktop App for macOS before version 6.0.10 may allow an authenticated user to conduct a denial of service via local access.
What to do
- Update zoom workplace_desktop to version 6.0.10 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| zoom | workplace_desktop |
< 6.0.10 cpe:2.3:a:zoom:workplace_desktop:*:*:*:*:*:macos:*:* |
Original advisory text
Uncontrolled search path element in the installer for Zoom Workplace Desktop App for macOS before version 6.0.10 may allow an authenticated user to conduct a denial of service via local access.
Uncontrolled search path element in the installer for Zoom Workplace Desktop App for macOS before version 6.0.10 may allow an authenticated user to conduct a denial of service via local access.
References
- https://www.zoom.com/en/trust/security-bulletin/zsb-24027 Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-427Uncontrolled Search Path Element
Timeline
Published15 Jul 2024
Updated26 Oct 2026
First seen29 Sep 2026
Sources
CVE-2024-39820 · NVD
Track software like this
Free during beta