Critical Vulnerability Discovered in Zoom Products

A high-severity vulnerability has been uncovered in various Zoom products, posing a significant threat to the security and integrity of Zoom sessions and user data. The vulnerability, which affects Zoom Desktop Client, Zoom VDI Client, and Zoom SDKs for Windows, stems from improper authentication, path traversal, improper access control, and cryptograph. If exploited, unauthorized users could potentially conduct privilege escalation attacks, leading to unauthorized actions such as modifying system settings, installing malware, or accessing sensitive information. The consequences of successful exploitation include data exfiltration, execution of malware, launch of DoS or DDoS attacks, and compromise of communication for individuals and organizations.

Zoom has released an urgent security update, version 5.16.10, to address the critical vulnerability. Users are strongly advised to upgrade to this version immediately to mitigate the risk of exploitation. The update can be obtained by downloading the latest Zoom software from the official Zoom website https://zoom.us/download. It is crucial for users to promptly install the security update to ensure the highest level of protection and safeguard against potential threats to their Zoom sessions and data.

For low end users, the vulnerability could potentially allow unauthorized users to gain privileges and perform unauthorized actions on their systems, such as accessing sensitive information or installing malware,. It is advisable that they promptly install this security update to ensure the highest level of protection for their Zoom sessions and data. By doing so, they can reduce the likelihood of exploitation and safeguard their privacy and security while using Zoom.