Weakness
A time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation process of certain Zoom Clients for Windows could allow an authenticated local user to escalate privileges.
Affected products
- zoom remote_control_for_zoom_contact_center
- zoom rooms
- zoom workplace_desktop
- zoom workplace_virtual_desktop_infrastructure
References
Find the bug before an attacker does.
Sign in with GitHub and run your first audit in under a minute. The free plan needs no credit card.