Zoom Workplace Apps Untrusted Search Path Vulnerability Allowing Privilege Escalation on Windows

A vulnerability exists in the installer for certain Zoom Workplace Apps on Windows, where an untrusted search path may enable an authorized user to escalate privileges through local access. This issue affects several different versions and/or ranges of the Zoom Workplace App, VDI Client, Zoom Rooms Client, Zoom Rooms Controller, and the Zoom Meeting and Video SDKs for Windows.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation.

Remediation

Users are advised to update to the latest versions of the Zoom Workplace App, Zoom Workplace VDI Client, Zoom Rooms Client, Zoom Rooms Controller, and the Zoom Meeting or Video SDK for Windows. The latest updates can be downloaded from the Zoom Download Center.