Zoom Workplace Apps Privilege Escalation Vulnerability

A vulnerability allowing privilege escalation has been identified in some Zoom Workplace Apps. This issue arises from improper handling of special elements, which may enable an authenticated user to gain elevated privileges through local access. The vulnerability affects several different versions and platforms of the Zoom Workplace Apps, including desktop applications for Windows, macOS, and Linux, as well as mobile applications for iOS and Android. Additionally, it impacts the Zoom VDI Client, Zoom Rooms Controllers and Clients across various operating systems, and the Zoom Meeting SDK for multiple platforms.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing users to gain elevated rights or access within the application or system.

Remediation

Users are advised to update to the latest version of the Zoom Workplace App. The updated version can be downloaded from the Zoom Download Center.