CVE-2024-45419

CVSS 3.1 Score 8.1 of 10 (high)

Details

Published Nov 19, 2024
CWE ID 252

Summary

CVE-2024-45419 is a newly disclosed vulnerability affecting some Zoom Apps. This issue stems from an lack of input validation, which can enable unauthenticated users to gain access to sensitive information through network means. By exploiting this vulnerability, an attacker could potentially disclose data, posing a risk to privacy and confidentiality. Zoom is encouraged to release a patch for this vulnerability to prevent potential misuse. Until then, users are advised to practice caution and avoid opening unverified links or attachments.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Video SDK

Affected Vendors

  • Zoom Video Communications, Inc