Zoom Apps and SDKs vulnerable to denial of service via network access
CVE-2024-27241

Currently unrated

Key Information:

Vendor
Zoom
Vendor
CVE Published:
15 July 2024

Summary

A vulnerability exists in certain Zoom Apps and SDKs due to improper input validation, potentially enabling an authenticated user to execute a denial of service attack. This flaw could be exploited through network access, disrupting normal operations and affecting service availability for other users. It is crucial for organizations utilizing Zoom products to assess their configurations and implement appropriate security measures to mitigate any risks associated with this vulnerability.

References

https://www.zoom.com/en/trust/security-bulletin/zsb-24020

Timeline

  • Vulnerability published

.