[{"vendor":"zoom","product":"workplace_desktop","defaultStatus":"unknown","cpes":["cpe:2.3:a:zoom:workplace_desktop:*:*:*:*:*:macos:*:*"],"versions":[{"version":"0","lessThan":"6.1.5","versionType":"custom","status":"affected"}]},{"vendor":"zoom","product":"macos_meeting_sdk","defaultStatus":"unknown","cpes":["cpe:2.3:a:zoom:macos_meeting_sdk:*:*:*:*:*:*:*:*"],"versions":[{"version":"0","lessThan":"6.1.5","versionType":"custom","status":"affected"}]},{"vendor":"zoom","product":"rooms","defaultStatus":"unknown","cpes":["cpe:2.3:a:zoom:rooms:-:*:*:*:*:macos:*:*"],"versions":[{"version":"0","lessThan":"6.1.5","versionType":"custom","status":"affected"}]}]

{"timestamp":"2024-08-15T13:31:24.474262Z","id":"CVE-2024-42441","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}

[{"vendor":"Zoom Communications Inc.","product":"Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS, Zoom Rooms Client for macOS","defaultStatus":"unaffected","platforms":["MacOS"],"versions":[{"version":"before version 6.1.5","status":"affected"}]}]

Improper privilege management in the installer for Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS and Zoom Rooms Client for macOS before 6.1.5 may allow a privileged user to conduct an escalation of privilege via local access.

Incorrect privilege assignment in the installer for Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS and Zoom Rooms Client for macOS before 6.1.5 may allow a privileged user to conduct an escalation of privilege via local access.

CWE-266

CWE-269

NIST AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NIST NVD-CWE-noinfo

OR
     *cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:macos:*:* versions up to (excluding) 6.1.5
     *cpe:2.3:a:zoom:rooms:*:*:*:*:*:macos:*:* versions up to (excluding) 6.1.5
     *cpe:2.3:a:zoom:workplace_desktop:*:*:*:*:*:macos:*:* versions up to (excluding) 6.1.5

https://www.zoom.com/en/trust/security-bulletin/zsb-24034 No Types Assigned

https://www.zoom.com/en/trust/security-bulletin/zsb-24034 Vendor Advisory

Improper privilege management in the installer for Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS and Zoom Rooms Client for macOS before 6.1.5 may allow a privileged user to conduct an escalation of privilege via local access.

Zoom Video Communications, Inc. AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Zoom Video Communications, Inc. CWE-269

Zoom Video Communications, Inc. https://www.zoom.com/en/trust/security-bulletin/zsb-24034 [No types assigned]