CVE-2024-24693
Improper access control in the installer for Zoom Rooms Client for Windows before version 5.17.5 may allow an authenticated user to conduct a denial of service via local access.
Scoring
- Severity
- HIGH
- CVSS base score
- 7.2
- CVSS vector
- CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:H/A:H
- EPSS probability
- 0.18%
- CWE
- CWE-379
- Published
- 2024-03-13
- Last modified
- 2026-03-13
Affected products
- Zoom Video Communications, Inc. Zoom Rooms Client for Windows
Weakness type
Related vulnerabilities
- CVE-2026-69482 — Windows Error Reporting Tampering Vulnerability
- CVE-2026-85028 — Creation of Temporary File in Directory with Insecure Permissions in AWS FPGA Development Kit
- CVE-2026-82346 — HP ImageDiags - Potential Escalation of Privilege
- CVE-2026-63693 — Dell Client BIOS contains an Improper Link Resolution Before File Access ('Link Following')...
- CVE-2026-12555 — HP Easy Start for macOS - Security Update
- CVE-2026-50544 — NortheBridge/luminalshine has Incorrect Permission Assignment for Critical Resource and Creation of Temporary File in Directory with Insecure Permissions
- CVE-2026-14551 — Local Privilege Escalation in servereye client (sensorhub)
- CVE-2026-46388 — osquery: Unprivileged users can temporarily read file carve contents