Zoom Workplace Apps for Windows Insecure Default Variable Initialization Vulnerability Allowing Integrity Loss

A vulnerability exists in some Zoom Workplace Apps for Windows due to insecure default variable initialization. This issue may enable an authenticated user to cause a loss of integrity through local access. The vulnerability affects the Zoom Workplace Desktop App for Windows prior to version 6.3.10, as well as the Zoom Rooms Controller and Client for Windows, both of which are also prior to version 6.4.0. Additionally, the Zoom Meeting SDK for Windows before version 6.3.10 is affected.

Impact

Exploitation of this vulnerability could lead to unauthorized modifications or corruption of data, allowing for a loss of integrity within the application.

Remediation

Users are advised to update to the latest version of the Zoom Workplace App for Windows, available through the Zoom Download Center. Instructions for updating Zoom Rooms applications can also be found in the Zoom Download Center.