Описание
Time-of-check time-of-use race condition in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via local access.
Затрагиваемое ПО
Zoom Meeting software development kitZoom RoomsZoom Rooms controllerZoom WorkplaceZoom Workplace desktopZoom Workplace virtual desktop infrastructure
CVSS
| Балл | 8.8 — высокая |
| Вектор | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H |
Источники
https://www.zoom.com/en/trust/security-bulletin/zsb-25016